Lucene search

K
cve[email protected]CVE-2004-1857
HistoryMay 10, 2005 - 4:00 a.m.

CVE-2004-1857

2005-05-1004:00:00
web.nvd.nist.gov
28
cve
2004
1857
directory traversal
vulnerability
hp web jetadmin
remote attack
authenticated
setinfo.hts
setinclude parameter

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

6.3 Medium

AI Score

Confidence

Low

0.923 High

EPSS

Percentile

99.0%

Directory traversal vulnerability in setinfo.hts in HP Web Jetadmin 7.5.2546 allows remote authenticated attackers to read arbitrary files via a … (dot dot) in the setinclude parameter.

Affected configurations

NVD
Node
hpweb_jetadminMatch7.5.2546

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

6.3 Medium

AI Score

Confidence

Low

0.923 High

EPSS

Percentile

99.0%

Related for CVE-2004-1857