Описание
Ipswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allows remote attackers to obtain source code for scripts via a trailing dot in a request to NmConsole/Login.asp.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:ipswitch:whatsup_professional:2006:*:*:*:*:*:*:*
cpe:2.3:a:ipswitch:whatsup_professional:2006_premium:*:*:*:*:*:*:*
EPSS
Процентиль: 53%
0.00298
Низкий
5 Medium
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
почти 4 года назад
Ipswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allows remote attackers to obtain source code for scripts via a trailing dot in a request to NmConsole/Login.asp.
EPSS
Процентиль: 53%
0.00298
Низкий
5 Medium
CVSS2
Дефекты
NVD-CWE-Other