CVE-2005-4249

Опубликовано: 15 дек. 2005

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

ADP Forum 2.0 through 2.0.3 stores sensitive information in plaintext files under the web document root with insufficient access control, which allows remote attackers to obtain user credentials via requests to the forum/users directory.

Ссылки

http://secunia.com/advisories/18027
Vendor Advisory
http://securityreason.com/securityalert/253
http://www.blogcu.com/Liz0ziM/144336/
Exploit
Vendor Advisory
URL Repurposed
http://www.securityfocus.com/archive/1/419393/100/0/threaded
http://secunia.com/advisories/18027
Vendor Advisory
http://securityreason.com/securityalert/253
http://www.blogcu.com/Liz0ziM/144336/
Exploit
Vendor Advisory
URL Repurposed
http://www.securityfocus.com/archive/1/419393/100/0/threaded

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:adp:adp_forum:2.0:*:*:*:*:*:*:*

cpe:2.3:a:adp:adp_forum:2.0.1:*:*:*:*:*:*:*

cpe:2.3:a:adp:adp_forum:2.0.2:*:*:*:*:*:*:*

cpe:2.3:a:adp:adp_forum:2.0.3:*:*:*:*:*:*:*

EPSS

Процентиль: 46%

0.00233

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-6jr2-9mj6-xwqc

github

почти 4 года назад