PT-2001-2483 · Web Information Gateway · The Web Information Gateway

Published 2001-07-19 · Updated 2008-09-05 · CVE-2001-1361

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions The Web Information Gateway (TWIG) version 2.7.1

Description The issue is possibly related to incorrect security rights and/or the generation of mailto links.

Recommendations For version 2.7.1, consider updating security rights configurations and reviewing the generation of mailto links to minimize potential risks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2001-1361

Affected Products

The Web Information Gateway

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2001-1361 · Security Note
• http://archives.neohapsis.com/archives/vulnwatch/2001-q3/0005.html · Vendor Advisory
• http://twig.screwdriver.net/file.php3?file=CHANGELOG · Note