2.7.4

DATE	CVE	VULNERABILITY TITLE	RISK
2018-02-01	CVE-2015-2203	Information Exposure vulnerability in Evergreen-Ils Evergreen 2.5.9/2.6.7/2.7.4 Evergreen 2.5.9, 2.6.7, and 2.7.4 allows remote authenticated users with STAFF_LOGIN permission to obtain sensitive settings history information by leveraging listing of open-ils.pcrud as a controller in the IDL. network low complexity evergreen-ils CWE-200	6.5

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.