CVEvulnerability

CVE-2012-3354

4.3 MEDIUM Published 2012-11-20 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-11-20
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
Weaknesses
CWE-200

Description

doku.php in DokuWiki, as used in Fedora 16, 17, and 18, when certain PHP error levels are set, allows remote attackers to obtain sensitive information via the prefix parameter, which reveals the installation path in an error message.

Affected configurations

• dokuwiki dokuwiki • fedoraproject fedora 16 • fedoraproject fedora 17 • fedoraproject fedora 18

Related

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References