PT-2003-2485 · Wf-Chat · Wf-Chat

Subj · Publicado 2003-12-31 · Atualizado 2018-10-19 · CVE-2003-1540

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions WF-Chat version 1.0 Beta

Description The issue allows remote attackers to obtain authentication information due to insufficient access control of sensitive information stored under the web root. This can be achieved via a direct request to API endpoints such as "/!pwds.txt" and "/!nicks.txt".

Recommendations For WF-Chat version 1.0 Beta, restrict access to the !pwds.txt and !nicks.txt files to minimize the risk of exploitation. Consider implementing proper access controls for sensitive information stored under the web root.

Exploit

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2003-1540

Produtos afetados

Wf-Chat

Referências · 8

• 🔥 https://exploit-db.com/exploits/22388 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2003-1540 · Nota de Segurança
• http://securitytracker.com/id?1006352 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11571 · Nota
• http://secunia.com/advisories/8396 · Nota
• http://securityreason.com/securityalert/3645 · Nota
• http://securityfocus.com/archive/1/315583/30/25430/threaded · Nota
• http://securityfocus.com/bid/7147 · Nota