PT-2006-1890 · Leif M. Wright · Leif M. Wright'S Blog

Aliaksandr Hartsuyeu · Publicado 2006-02-22 · Atualizado 2017-07-20 · CVE-2006-0843

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Leif M. Wright's Blog version 3.5

Description The issue allows remote attackers to read the administrator's password due to insufficient access control of the config file and other txt files stored under the web root.

Recommendations For version 3.5, restrict access to the config file and other sensitive txt files to prevent remote reading of the administrator's password. Consider moving these files outside of the web root or implementing proper access controls to mitigate the risk.

Correção

Identificadores relacionados

CVE-2006-0843

Produtos afetados

Leif M. Wright'S Blog

Referências · 6

• https://exchange.xforce.ibmcloud.com/vulnerabilities/24752 · Nota
• http://securityfocus.com/bid/16712 · Nota
• http://secunia.com/advisories/18923 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2006-0843 · Nota de Segurança
• http://evuln.com/vulns/82/summary.html · Aviso do Fabricante
• http://securityreason.com/securityalert/522 · Nota