PT-2004-3574 · Intersystems · Intersystems Cache

Published 2004-12-31 · Updated 2008-09-05 · CVE-2004-2684

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions InterSystems Cache version 5.0

Description The issue allows attackers to access certain files on a server, including cache.key and cache.dat, related to .csp files under Devstudiotemplates and Dev:userstudiotemplates.

Recommendations For InterSystems Cache version 5.0, restrict access to the .csp files under the Devstudiotemplates and Dev:userstudiotemplates directories to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2004-2684

Affected Products

Intersystems Cache

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2004-2684 · Security Note
• http://groups.google.com/group/intersystems-public-cache/browse_thread/thread/7af3237a57e97f14/da52318590c68c75 · Note
• http://groups.google.com/group/intersystems-public-cache/browse_thread/thread/cda052864061faf7/b1c4ad61ca27c514 · Note