The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-1194 advisory.

    [0.12.2-81.0.2.el5]
    - Replaced redhat logo image in Data.fs

    [0.12.2-81.0.1.el5]
    - Added conga-enterprise-Carthage.patch to support OEL5
    - Replaced redhat logo image in conga-0.12.2.tar.gz

    [0.12.2-81]
    - luci: prevent non-admin user from unauthorized executive access       Resolves: rhbz#1089310

    [0.12.2-79]
    - luci: drop unsuccessful monkey patch application wrt. Plone 20121106 advisory       Related: rhbz#956861

    [0.12.2-78]
    - luci: reflect startup_wait parameter added in postgres-8 RA       Resolves: rhbz#1065263
    - luci: Multiple information leak flaws in various luci site extensions       Resolves: rhbz#1076148

    [0.12.2-72]
    - luci: fix mishandling of distro release string       Resolves: rhbz#1072075
    - luci: fix initscript does not check return values correctly       Resolves: rhbz#970288
    - ricci: fix end-use modules do not handle stdin polling correctly       Resolves: rhbz#1076711

    [0.12.2-69]
    - luci: apply relevant parts of Plone 20121106 advisory (multiple vectors)       Resolves: rhbz#956861

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Oracle Linux 5 : conga (ELSA-2014-1194)

medium Nessus Plugin ID 77735

Version 1.12