Lucene search
HistoryDec 15, 2005 - 11:03 a.m.
CVE-2005-4249
adp forum
cve-2005-4249
sensitive information disclosure
web security
access control
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.7 Medium
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
76.4%
ADP Forum 2.0 through 2.0.3 stores sensitive information in plaintext files under the web document root with insufficient access control, which allows remote attackers to obtain user credentials via requests to the forum/users directory.
Affected configurations
Node
adpadp_forumMatch2.0
ORadpadp_forumMatch2.0.1
ORadpadp_forumMatch2.0.2
ORadpadp_forumMatch2.0.3
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.7 Medium
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
76.4%
Related for CVE-2005-4249