Lucene search
HistoryJun 18, 2007 - 10:30 a.m.
CVE-2007-3252
portalapp
sensitive information
web security
access control
cve-2007-3252
vulnerability
nvd
6.6 Medium
AI Score
Confidence
Low
7.8 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
0.006 Low
EPSS
Percentile
78.6%
PortalApp stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for 8691.mdb, a different vector than CVE-2004-1786.
| CPE | Name | Operator | Version |
|---|---|---|---|
| portalapp:portalapp | portalapp | le | 4.0 |
Related
cvelist
cvelist
CVE-2007-3252
2007-06-18 10:00:00
CVE-2004-1786
2005-05-10 04:00:00
prion
prion
Improper access control
2007-06-18 10:30:00
cve
cve
CVE-2004-1786
2004-01-04 05:00:00
6.6 Medium
AI Score
Confidence
Low
7.8 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
0.006 Low
EPSS
Percentile
78.6%
Related for CVE-2007-3252