Lucene search
MitreCVE-2005-4452HistoryDec 21, 2005 - 11:03 a.m.
CVE-2005-4452
2005-12-2111:03:00
mitre
web.nvd.nist.gov
23
information security
data access control
web security
cve-2005-4452
nvd
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.6
Confidence
Low
EPSS
0.005
Percentile
76.5%
Information Call Center stores the CallCenterData.mdb database under the web root with insufficient access control, which allows remote attackers to obtain sensitive information such as usernames and passwords.
Affected configurations
Node
information_call_centerinformation_call_center
| Vendor | Product | Version | CPE |
|---|---|---|---|
| information_call_center | information_call_center | * | cpe:2.3:a:information_call_center:information_call_center:*:*:*:*:*:*:*:* |
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.6
Confidence
Low
EPSS
0.005
Percentile
76.5%
Related for CVE-2005-4452