CVE-2014-9245: Zenoss Core through 5 Beta 3 allows remote attackers to obtain sensitive information by attempting a produc...

Security readout for executives and security teams

CVE-2014-9245 is an information disclosure issue in Zenoss Core through 5 Beta 3. A remote attacker could trigger an error during a product-rename action and read a stack trace that exposes sensitive internal details, such as internal URLs. Exposure is most likely where Zenoss Core through 5 Beta 3 or older beta-era deployments remain reachable, especially on management interfaces exposed to untrusted networks. Treat as a legacy exposure cleanup item unless an affected system is externally reachable. Business risk comes from leaked internal infrastructure details that may aid later attacks. Mitigation focus: Identify any Zenoss Core deployments through 5 Beta 3.; Check current vendor or CERT guidance for ZEN-15382 remediation.; Restrict Zenoss management access to trusted administrative networks..

Prepared

Jun 14, 2026, 05:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.