Lucene search
HistoryMar 19, 2006 - 11:06 a.m.
CVE-2006-1280
cgi
session
cve-2006-1280
security
permission
local users
privileged information
6.4 Medium
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.004 Low
EPSS
Percentile
74.1%
CGI::Session 4.03-1 does not set proper permissions on temporary files created in (1) Driver::File and (2) Driver::db_file, which allows local users to obtain privileged information, such as session keys, by viewing the files.
| CPE | Name | Operator | Version |
|---|---|---|---|
| sherzod_ruzmetov:cgi_session | sherzod ruzmetov cgi session | le | 4.03 |
Related
debiancve
debiancve
CVE-2006-1280
2006-03-19 11:06:00
prion
prion
Design/Logic Flaw
2006-03-19 11:06:00
ubuntucve
ubuntucve
CVE-2006-1280
2006-03-19 00:00:00
6.4 Medium
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.004 Low
EPSS
Percentile
74.1%
Related for CVE-2006-1280