Tibbo AggreGate Network Manager Sensitive Information Exposure Vulnerability

A vulnerability exists in Tibbo AggreGate Network Manager versions prior to 6.40.05, where sensitive system information is exposed through an unauthenticated endpoint. The affected endpoint, /cwmp/happyaxis.jsp, discloses Java system properties, server path details, and version information to unauthorized users. This information leakage could potentially be exploited to facilitate further attacks on the system.

Impact

The vulnerability allows unauthorized users to access sensitive system information, which could be used to compromise the system further.