Lucene search

K
cve[email protected]CVE-2006-6510
HistoryDec 14, 2006 - 12:28 a.m.

CVE-2006-6510

2006-12-1400:28:00
NVD-CWE-Other
web.nvd.nist.gov
17
cve-2006-6510
activex control
sitekiosk
local users
security bypass

6.7 Medium

AI Score

Confidence

Low

1.7 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:S/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

5.2%

An unspecified ActiveX control in SiteKiosk before 6.5.150 is installed “safe for scripting”, which allows local users to bypass security protections and read arbitrary files via certain functions.

6.7 Medium

AI Score

Confidence

Low

1.7 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:S/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

5.2%

Related for CVE-2006-6510