Lucene search

[email protected]CVE-2005-2286

HistoryJul 18, 2005 - 4:00 a.m.

CVE-2005-2286

2005-07-1804:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2005-2286

webeoc

authorization

vulnerability

nvd

7.1 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.004 Low

EPSS

Percentile

73.4%

JSON

WebEOC before 6.0.2 does not properly check user authorization, which allows remote attackers to gain privileges via a direct request to a resource.

CPENameOperatorVersion
esi_products:webeocesi products webeocle6.0.1

CPE	Name	Operator	Version
esi_products:webeoc	esi products webeoc	le	6.0.1

References

www.kb.cert.org/vuls/id/258834

www.kb.cert.org/vuls/id/JGEI-6BWLWG

7.1 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.004 Low

EPSS

Percentile

73.4%

JSON

Related for CVE-2005-2286

cert1