Zope Installation Path Disclosure

  1. Network Vulnerabilities
  2. Web Servers
  3. Zope Installation Path Disclosure
Summary
The remote web server contains an application server that is prone to information disclosure. Description : There is a minor security problem in all releases of Zope prior to version 2.5.1b1 - they reveal the installation path when an invalid XML RPC request is sent.
Solution
Upgrade to Zope 2.5.1b1 / 2.6.0b1 or later.
Severity
Medium Severity
Classification
Related Vulnerabilities