PT-2002-2383 · Portalapp · Portalapp

Published 2002-12-31 · Updated 2017-07-11 · CVE-2002-1659

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions PortalApp version 2.2

Description The issue allows local users to gain privileges by modifying the user id variable in the 'user profile.asp' file.

Recommendations For PortalApp version 2.2, avoid using the user id variable in the 'user profile.asp' file until the issue is resolved. As a temporary workaround, consider restricting access to the 'user profile.asp' file to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2002-1659

Affected Products

Portalapp

References · 5

• 🔥 http://securitytracker.com/id?1005541 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-1659 · Security Note
• http://secunia.com/advisories/10465 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1659 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/10558 · Note