Lucene search
HistoryNov 08, 2007 - 8:00 p.m.
CVE-2004-2748
netiq
webtrends
reporting center
cve-2004-2748
security vulnerability
nvd
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
7 High
AI Score
Confidence
Low
0.02 Low
EPSS
Percentile
88.8%
viewreport.pl in NetIQ WebTrends Reporting Center Enterprise Edition 6.1a allows remote attackers to determine the installation path via an invalid profileid parameter, which leaks the pathname in an error message.
Affected configurations
Node
webtrendsreporting_centerMatch6.1a
| CPE | Name | Operator | Version |
|---|---|---|---|
| webtrends:reporting_center | webtrends reporting center | eq | 6.1a |
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
7 High
AI Score
Confidence
Low
0.02 Low
EPSS
Percentile
88.8%
Related for CVE-2004-2748