Lucene search
HistoryDec 07, 2006 - 5:28 p.m.
CVE-2006-6378
cve-2006-6378
btsavemysql
sensitive data
web root
access control
remote attackers
configuration files
save files
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.9 Medium
AI Score
Confidence
Low
0.011 Low
EPSS
Percentile
84.9%
BTSaveMySql 1.2 stores sensitive data under the web root with insufficient access control, which allows remote attackers to obtain configuration and save files via direct requests.
Affected configurations
Node
widcommbtsavemysqlMatch1.2
| CPE | Name | Operator | Version |
|---|---|---|---|
| widcomm:btsavemysql | widcomm btsavemysql | eq | 1.2 |
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.9 Medium
AI Score
Confidence
Low
0.011 Low
EPSS
Percentile
84.9%
Related for CVE-2006-6378