Lucene search

K
cve[email protected]CVE-1999-1374
HistoryMay 02, 2005 - 4:00 a.m.

CVE-1999-1374

2005-05-0204:00:00
NVD-CWE-Other
web.nvd.nist.gov
28
cve-1999-1374
information security
perlshop.cgi
sensitive data exposure
http request
remote attack
nvd

6.5 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.005 Low

EPSS

Percentile

75.4%

perlshop.cgi shopping cart program stores sensitive customer information in directories and files that are under the web root, which allows remote attackers to obtain that information via an HTTP request.

CPENameOperatorVersion
arpanet:perlshoparpanet perlshopeq*

6.5 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.005 Low

EPSS

Percentile

75.4%

Related for CVE-1999-1374