PT-2001-2036 · Alchemy · Alchemy Network Monitor+1

Publicado 2001-11-30 · Atualizado 2017-12-19 · CVE-2001-0870

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Alchemy Eye and Alchemy Network Monitor versions 1.9x through 2.6.18

Description The HTTP server in the affected software is enabled without authentication by default. This allows remote attackers to obtain network monitoring logs, which may contain sensitive information, by directly requesting the eye.ini file.

Recommendations For versions 1.9x through 2.6.18, consider disabling the HTTP server or configuring it to require authentication to prevent unauthorized access to network monitoring logs.

Correção

Identificadores relacionados

CVE-2001-0870

Produtos afetados

Alchemy Eye

Alchemy Network Monitor

Referências · 4

• http://securityfocus.com/bid/3598 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7630 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2001-0870 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=100715758109838&w=2 · Nota