PT-2003-1594 · Vignette · Vignette Storyserver+1

Ramon Pinuaga Cascales

·

Publicado

2003-06-11

·

Atualizado

2016-10-18

·

CVE-2003-0403

CVSS v2.0

7.5

Alta

VetorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions: Vignette StoryServer version 5 Vignette V/5
Description: The issue allows remote attackers to read and modify license information and cause a denial of service by directly accessing the "/vgn/license" template.
Recommendations: For Vignette StoryServer version 5, restrict access to the "/vgn/license" template to prevent unauthorized modifications and denial of service attacks. For Vignette V/5, restrict access to the "/vgn/license" template to prevent unauthorized modifications and denial of service attacks.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2003-0403

Produtos afetados

Vignette Storyserver
Vignette V/5