Lucene search
HistoryJul 15, 2007 - 11:30 p.m.
CVE-2007-3788
esoft instagate ex2
utm device
admin password
sensitive information
html document
cve-2007-3788
7.6 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:C/I:C/A:C
6.1 Medium
AI Score
Confidence
Low
0.006 Low
EPSS
Percentile
77.7%
The eSoft InstaGate EX2 UTM device stores the admin password within the settings HTML document, which might allow context-dependent attackers to obtain sensitive information by reading this document.
Affected configurations
Node
esoftinstagate_ex2_utmMatchfirmware_3.1.20031001
OResoftinstagate_ex2_utmMatchfirmware_3.1.20060921
OResoftinstagate_ex2_utmMatchfirmware_3.1.20070605
Related
cvelist
cvelist
CVE-2007-3788
2007-07-15 23:00:00
prion
prion
Design/Logic Flaw
2007-07-15 23:30:00
nvd
nvd
CVE-2007-3788
2007-07-15 23:30:00
7.6 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:C/I:C/A:C
6.1 Medium
AI Score
Confidence
Low
0.006 Low
EPSS
Percentile
77.7%
Related for CVE-2007-3788