ZTE GoldenDB Database Information Disclosure Vulnerability

An information disclosure vulnerability has been identified in ZTE GoldenDB database versions 6.1.03 prior to 6.1.03.10, 7.2.01.01, and Lite 7.2.01.01. Attackers can exploit this vulnerability by manipulating parameters through the interface, allowing them to extract sensitive system information from error messages.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information within the system.

Remediation

Users can upgrade to ZTE GoldenDB versions 6.1.03.11, 7.2.01.01P1, or Lite 7.2.01.01P1. For assistance, contact the ZTE Global Customer Support Center.