Lucene search

K
cve[email protected]CVE-2006-6016
HistoryOct 03, 2022 - 4:21 p.m.

CVE-2006-6016

2022-10-0316:21:23
web.nvd.nist.gov
20
wordpress
user-edit.php
cve-2006-6016
metadata leak
nvd

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

6.2 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

51.5%

wp-admin/user-edit.php in WordPress before 2.0.5 allows remote authenticated users to read the metadata of an arbitrary user via a modified user_id parameter.

Affected configurations

NVD
Node
wordpresswordpressRange2.0.4
CPENameOperatorVersion
wordpress:wordpresswordpressle2.0.4

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

6.2 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

51.5%