Lucene search

K
cve[email protected]CVE-2007-6197
HistoryDec 01, 2007 - 6:46 a.m.

CVE-2007-6197

2007-12-0106:46:00
CWE-200
web.nvd.nist.gov
21
cve-2007-6197
plumtree portal
bea aqualogic interaction
remote attackers
html source
security vulnerability

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.5 Medium

AI Score

Confidence

High

0.013 Low

EPSS

Percentile

86.0%

The Plumtree portal in BEA AquaLogic Interaction 5.0.2 through 5.0.4 and 6.0.1.218452 allows remote attackers to obtain version numbers and internal hostnames by reading comments in the HTML source of any page.

Affected configurations

NVD
Node
beaaqualogic_interactionMatch5.0.2
OR
beaaqualogic_interactionMatch5.0.3
OR
beaaqualogic_interactionMatch5.0.4
OR
beaaqualogic_interactionMatch6.0.1.218452

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.5 Medium

AI Score

Confidence

High

0.013 Low

EPSS

Percentile

86.0%

Related for CVE-2007-6197