PT-2004-2537 · Open Workflow Engine · Openwfe

Jose Antonio Coret + 1 · Publicado 2004-10-25 · Atualizado 2017-07-11 · CVE-2004-1631

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Open WorkFlow Engine (OpenWFE) versions 1.4.x

Description The issue allows remote attackers to conduct port scans of remote hosts. This is achieved by specifying the target in an "rmi:// Worklist URL", then using the response times to infer the results.

Recommendations For OpenWFE versions 1.4.x, consider restricting access to the rmi:// Worklist URL to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2004-1631

Produtos afetados

Openwfe

Referências · 5

• http://secunia.com/advisories/12970 · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=109876304705234&w=2 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17852 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-1631 · Nota de Segurança
• http://securityfocus.com/bid/11514 · Aviso do Fabricante