Lucene search
HistorySep 16, 2005 - 10:03 p.m.
CVE-2005-2956
atutor
chat logs
access control
security vulnerability
cve-2005-2956
7 High
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.021 Low
EPSS
Percentile
89.3%
ATutor 1.5.1, and possibly earlier versions, stores temporary chat logs under the web document root with insufficient access control and predictable filenames, which allows remote attackers to obtain user chat conversations via direct requests to those files.
| CPE | Name | Operator | Version |
|---|---|---|---|
| adaptive_technology_resource_centre:atutor | adaptive technology resource centre atutor | eq | 1.5.1 |
7 High
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.021 Low
EPSS
Percentile
89.3%
Related for CVE-2005-2956