Lucene search
HistoryDec 31, 2005 - 5:00 a.m.
CVE-2005-2463
cve-2005-2463
kayako liveresponse
remote attackers
sensitive information
addressbook.php
include scripts
path disclosure
nvd
6.4 Medium
AI Score
Confidence
Low
6.4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
0.007 Low
EPSS
Percentile
79.3%
Kayako liveResponse 2.x allows remote attackers to obtain sensitive information via a direct request to addressbook.php and other include scripts, which reveals the path in an error message.
| CPE | Name | Operator | Version |
|---|---|---|---|
| kayako:liveresponse | kayako liveresponse | eq | 2.0 |
6.4 Medium
AI Score
Confidence
Low
6.4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
0.007 Low
EPSS
Percentile
79.3%
Related for CVE-2005-2463