Lucene search
HistoryFeb 22, 2008 - 9:44 p.m.
CVE-2008-0904
cve-2008-0904
unspecified vulnerability
download servlet
bea plumtree collaboration
aqualogic interaction
remote attackers
arbitrary files
crafted url
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
6.6 Medium
AI Score
Confidence
High
0.005 Low
EPSS
Percentile
76.2%
Unspecified vulnerability in the download servlet in BEA Plumtree Collaboration 4.1 through SP2 and AquaLogic Interaction 4.2 through MP1 allows remote attackers to read arbitrary files via a crafted URL.
Affected configurations
Node
bea_systemsaqualogic_interactionMatch4.2
ORbea_systemsaqualogic_interactionMatch4.2_mp1
ORbea_systemsplumtree_collaborationMatch4.1
ORbea_systemsplumtree_collaborationMatch4.1_sp1
ORbea_systemsplumtree_collaborationMatch4.1_sp2
Related
nvd
nvd
CVE-2008-0904
2008-02-22 21:44:00
cvelist
cvelist
CVE-2008-0904
2008-02-22 21:00:00
prion
prion
Security feature bypass
2008-02-22 21:44:00
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
6.6 Medium
AI Score
Confidence
High
0.005 Low
EPSS
Percentile
76.2%
Related for CVE-2008-0904