Lucene search

K
cve[email protected]CVE-2002-1188
HistoryDec 11, 2002 - 5:00 a.m.

CVE-2002-1188

2002-12-1105:00:00
NVD-CWE-Other
web.nvd.nist.gov
24
cve-2002-1188
internet explorer
vulnerability
path identification
user information disclosure
cookies
security
nvd

6.8 Medium

AI Score

Confidence

Low

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

0.333 Low

EPSS

Percentile

97.0%

Internet Explorer 5.01 through 6.0 allows remote attackers to identify the path to the Temporary Internet Files folder and obtain user information such as cookies via certain uses of the OBJECT tag, which are not subjected to the proper security checks, aka “Temporary Internet Files folders Name Reading.”

6.8 Medium

AI Score

Confidence

Low

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

0.333 Low

EPSS

Percentile

97.0%

Related for CVE-2002-1188