Nanometrics Centaur / TitanSMA Unauthenticated Remote Memory Leak
Posted by deepcore on February 18, 2020 – 6:28 am
An information disclosure vulnerability exists when Centaur and TitanSMA fail to properly protect critical system logs such as ‘syslog’. Additionally, the implemented Jetty version (9.4.z-SNAPSHOT) suffers from a memory leak of shared buffers that was (supposedly) patched in Jetty version 9.2.9.v20150224.
Post a reply
You must be logged in to post a comment.