Lucene search
HistoryOct 03, 2022 - 4:23 p.m.
CVE-2002-2094
cve-2002-2094
information security
path disclosure
vulnerability
remote attackers
web root directory
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
7 High
AI Score
Confidence
Low
0.008 Low
EPSS
Percentile
81.7%
Joe Testa hellbent 01 allows remote attackers to determine the full path of the web root directory via a GET request with a relative path that includes the root’s parent, which generates a 403 error message if the parent is incorrect, but a normal response if the parent is correct.
Affected configurations
Node
joetestahellbentMatch0.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| joetesta:hellbent | joetesta hellbent | eq | 0.1 |
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
7 High
AI Score
Confidence
Low
0.008 Low
EPSS
Percentile
81.7%
Related for CVE-2002-2094