exploitDog

CVE-2004-2214

Опубликовано: 31 дек. 2004

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

Mbedthis AppWeb HTTP server before 1.1.3 allows remote attackers to bypass access restrictions via a URI with mixed case characters.

Ссылки

http://secunia.com/advisories/12011
Broken Link
Patch
Vendor Advisory
http://www.mbedthis.com/products/appWeb/doc/product/newFeatures.html
Broken Link
http://www.osvdb.org/7391
Broken Link
Patch
http://www.securityfocus.com/bid/10673
Broken Link
Patch
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/16638
Third Party Advisory
VDB Entry
http://secunia.com/advisories/12011
Broken Link
Patch
Vendor Advisory
http://www.mbedthis.com/products/appWeb/doc/product/newFeatures.html
Broken Link
http://www.osvdb.org/7391
Broken Link
Patch
http://www.securityfocus.com/bid/10673
Broken Link
Patch
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/16638
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:mbedthis:appweb_http_server:*:*:*:*:*:*:*:*

Версия до 1.1.3 (исключая)

EPSS

Процентиль: 69%

0.00624

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-178

Связанные уязвимости

GHSA-2j2f-h2gf-6r4c

CVSS3: 9.8

github

больше 3 лет назад

Mbedthis AppWeb HTTP server before 1.1.3 allows remote attackers to bypass access restrictions via a URI with mixed case characters.

EPSS

Процентиль: 69%

0.00624

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-178