PT-2004-3098 · Ansel · Ansel

Publicado 2004-12-31 · Atualizado 2017-07-11 · CVE-2004-2203

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Ansel versions 1.2 through 2.0

Description The issue allows remote attackers to gain access to web readable directories due to insecure default permissions.

Recommendations For versions 1.2 through 2.0, update the permissions to secure settings to prevent unauthorized access.

Correção

Identificadores relacionados

CVE-2004-2203

Produtos afetados

Ansel

Referências · 5

• http://osvdb.org/10898 · Correção
• http://securityfocus.com/bid/11420 · Correção
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17767 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-2203 · Nota de Segurança
• http://securitytracker.com/id?1011775 · Correção