Lucene search

[email protected]CVE-2002-1728

HistoryJun 21, 2005 - 4:00 a.m.

CVE-2002-1728

2005-06-2104:00:00

[email protected]

web.nvd.nist.gov

cve-2002-1728

information security

vulnerability

path disclosure

remote attack

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7.1 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

77.2%

JSON

askSam Web Publisher 1.0 and 4.0 allows remote attackers to determine the full path to the web root directory via a request for a file that does not exist, which generates an error message that reveals the full path.

Affected configurations

NVD

Node

asksam_systemsasksam_web_publisherMatch1.0

asksam_systemsasksam_web_publisherMatch4.0

CPENameOperatorVersion
asksam_systems:asksam_web_publisherasksam systems asksam web publishereq1.0
asksam_systems:asksam_web_publisherasksam systems asksam web publishereq4.0

CPE	Name	Operator	Version
asksam_systems:asksam_web_publisher	asksam systems asksam web publisher	eq	1.0
asksam_systems:asksam_web_publisher	asksam systems asksam web publisher	eq	4.0

References

online.securityfocus.com/archive/82/270970

www.ifrance.com/kitetoua/tuto/5holes4.txt

www.securityfocus.com/bid/4670

exchange.xforce.ibmcloud.com/vulnerabilities/9004

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7.1 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

77.2%

JSON

Related for CVE-2002-1728

cvelist1 nvd1