Lucene search

[email protected]CVE-2005-1568

HistoryMay 14, 2005 - 4:00 a.m.

CVE-2005-1568

2005-05-1404:00:00

[email protected]

web.nvd.nist.gov

cve-2005-1568

directtopics

information disclosure

topic.php

nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.6 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

75.9%

JSON

topic.php in DirectTopics 2.1 and 2.2 allows remote attackers to obtain sensitive information via an invalid topic parameter, which reveals the path in an error message.

Affected configurations

NVD

Node

directtopicsdirecttopicsMatch2.1

directtopicsdirecttopicsMatch2.2

directtopicsdirecttopicsMatchbeta

directtopicsdirecttopicsMatchfinal

CPENameOperatorVersion
directtopics:directtopicsdirecttopicseq2.1
directtopics:directtopicsdirecttopicseq2.2
directtopics:directtopicsdirecttopicseqbeta
directtopics:directtopicsdirecttopicseqfinal

CPE	Name	Operator	Version
directtopics:directtopics	directtopics	eq	2.1
directtopics:directtopics	directtopics	eq	2.2
directtopics:directtopics	directtopics	eq	beta
directtopics:directtopics	directtopics	eq	final

References

marc.info/?l=bugtraq&m=111592417803514&w=2

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.6 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

75.9%

JSON

Related for CVE-2005-1568

nvd1 cvelist1