PT-2002-1181 · Orbis · Bscw
Publicado
2002-03-25
·
Atualizado
2008-09-05
·
CVE-2002-0095
CVSS v2.0
7.5
Alta
| Vetor | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
BSCW versions 3.x
Description
The default configuration of BSCW enables user self-registration, which could allow remote attackers to upload files and possibly join a user community that was intended to be closed.
Recommendations
For BSCW versions 3.x, consider disabling the user self-registration feature to prevent unauthorized access and file uploads.
Exploit
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Bscw