PT-2005-5059 · Intermesh · Adaptive Website Framework

Publicado 2005-12-20 · Atualizado 2008-09-20 · CVE-2005-4373

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Adaptive Website Framework (AWF) versions 2.10 and earlier

Description The issue allows remote attackers to obtain the full path of the application via an invalid mode parameter to "community.html", which leaks the path in an error message.

Recommendations For versions 2.10 and earlier, consider restricting access to the "community.html" endpoint until a fix is available, and avoid using invalid parameters to prevent path leakage.

Correção

Identificadores relacionados

CVE-2005-4373

Produtos afetados

Adaptive Website Framework

Referências · 4

• http://osvdb.org/21915 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-4373 · Nota de Segurança
• http://pridels0.blogspot.com/2005/12/awf-adaptive-website-framework-vuln.html · Nota
• http://awf-cms.org/news.html · Nota