PT-2006-6989 · Unknown · Btsavemysql

Sn0Opy · Publicado 2006-12-07 · Atualizado 2018-10-17 · CVE-2006-6378

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions BTSaveMySql version 1.2

Description The issue allows remote attackers to obtain configuration and save files via direct requests due to insufficient access control of sensitive data stored under the web root.

Recommendations For BTSaveMySql version 1.2, consider restricting access to sensitive data stored under the web root to minimize the risk of exploitation. As a temporary workaround, limit direct requests to configuration and save files until a proper fix is applied.

Correção

Identificadores relacionados

CVE-2006-6378

Produtos afetados

Btsavemysql

Referências · 4

• https://exchange.xforce.ibmcloud.com/vulnerabilities/30760 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-6378 · Nota de Segurança
• http://securityfocus.com/archive/1/453652/100/0/threaded · Nota
• http://securityreason.com/securityalert/2002 · Nota