PT-2004-3574 · Intersystems · Intersystems Cache

Publicado 2004-12-31 · Atualizado 2008-09-05 · CVE-2004-2684

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions InterSystems Cache version 5.0

Description The issue allows attackers to access certain files on a server, including cache.key and cache.dat, related to .csp files under Devstudiotemplates and Dev:userstudiotemplates.

Recommendations For InterSystems Cache version 5.0, restrict access to the .csp files under the Devstudiotemplates and Dev:userstudiotemplates directories to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2004-2684

Produtos afetados

Intersystems Cache

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2004-2684 · Nota de Segurança
• http://groups.google.com/group/intersystems-public-cache/browse_thread/thread/7af3237a57e97f14/da52318590c68c75 · Nota
• http://groups.google.com/group/intersystems-public-cache/browse_thread/thread/cda052864061faf7/b1c4ad61ca27c514 · Nota