Lucene search
HistoryOct 09, 2007 - 10:00 a.m.
CVE-2004-2732
netbilling 2.0
nbmember.cgi
remote attackers
sensitive information
access key
cve-2004-2732
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
6.2 Medium
AI Score
Confidence
Low
0.011 Low
EPSS
Percentile
84.9%
nbmember.cgi in Netbilling 2.0 allows remote attackers to obtain sensitive information via the cmd=test option, which can be leveraged to determine the access key.
Affected configurations
Node
netbillingnetbillingMatch2.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| netbilling:netbilling | netbilling | eq | 2.0 |
Related
nvd
nvd
CVE-2004-2732
2004-12-31 05:00:00
openvas
openvas
nbmember.cgi information disclosure
2005-11-03 00:00:00
cvelist
cvelist
CVE-2004-2732
2007-10-09 10:00:00
nessus
nessus
Netbilling nbmember.cgi cmd Parameter Information Disclosure
2004-10-21 00:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
6.2 Medium
AI Score
Confidence
Low
0.011 Low
EPSS
Percentile
84.9%
Related for CVE-2004-2732