PT-2004-1945 · Vignette · Vignette Application Portal

Publicado 2004-11-19 · Atualizado 2017-07-11 · CVE-2004-0917

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Vignette Application Portal (affected versions not specified)

Description: The issue concerns the default installation of the software, where the diagnostic utility is installed without authentication requirements. This allows remote attackers to gain sensitive information, such as server and OS version, and conduct unauthorized activities via an HTTP request to "/diag".

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2004-0917

Produtos afetados

Vignette Application Portal

Referências · 5

• 🔥 http://atstake.com/research/advisories/2004/a092804-1.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2004-0917 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17530 · Nota
• http://securityfocus.com/bid/11267 · Aviso do Fabricante
• http://securitytracker.com/id?1011447 · Nota