VWE-2017-4282
Return to current revision
Differences in Content
-
[template]Vulnerability
| cve=
| aka=
| severity=Low -
-
| difficulty=Difficult -
+
| difficulty=Hard -
| description=Information disclosure. Error message tells attackers when they have filled available attachment space. Does not affect VaultWiki Lite.
| discover-date=November 5, 2017
| patch-date=December 1, 2017
| patches=4.0.20 Patch Level 1
4.0.19 Patch Level 4
| workaround=[/template]
[h=3]Notes[/h]
Prior to 4.0.19, similar disclosures were not treated as security issues. In 4.0.19, such disclosures were fixed as standard bugs, with future disclosures to be treated as security issues. Thus, Information Disclosures are only patched for 4.0.19 and later.