PT-2001-2483 · Web Information Gateway · The Web Information Gateway

Publicado 2001-07-19 · Atualizado 2008-09-05 · CVE-2001-1361

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions The Web Information Gateway (TWIG) version 2.7.1

Description The issue is possibly related to incorrect security rights and/or the generation of mailto links.

Recommendations For version 2.7.1, consider updating security rights configurations and reviewing the generation of mailto links to minimize potential risks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2001-1361

Produtos afetados

The Web Information Gateway

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2001-1361 · Nota de Segurança
• http://archives.neohapsis.com/archives/vulnwatch/2001-q3/0005.html · Aviso do Fabricante
• http://twig.screwdriver.net/file.php3?file=CHANGELOG · Nota