Executive Summary

This vulnerability is a sensitive information disclosure issue in the error handling component of ATISoluciones CIGES Application version 2.15.6 and earlier. When unexpected conditions cause unhandled exceptions, the application returns detailed error messages and stack traces to the client. These messages may reveal internal filesystem paths, SQL queries, database connection details, or environment configuration data to remote unauthenticated attackers. While it allows attackers to gather information and perform reconnaissance, it does not allow direct system compromise.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability can impact you by exposing sensitive internal information such as filesystem paths, SQL queries, database connection details, and environment configuration data to remote unauthenticated attackers. This information disclosure can aid attackers in gathering intelligence about the system, potentially facilitating further attacks or exploitation, although it does not directly allow system compromise.

Useful 0 Not Useful 0