Lucene search
HistoryAug 12, 2009 - 10:30 a.m.
CVE-2008-6955
cve-2008-6955
mxcamarchive
sensitive information
access control
remote attackers
configuration details
passwords
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.5 Medium
AI Score
Confidence
Low
0.008 Low
EPSS
Percentile
81.4%
mxCamArchive 2.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain configuration details and passwords via a direct request for archive/config.ini.
Affected configurations
Node
infirealmxcamarchiveMatch2.2
| CPE | Name | Operator | Version |
|---|---|---|---|
| infireal:mxcamarchive | infireal mxcamarchive | eq | 2.2 |
Related
prion
prion
Improper access control
2009-08-12 10:30:00
nvd
nvd
CVE-2008-6955
2009-08-12 10:30:00
cvelist
cvelist
CVE-2008-6955
2009-08-12 10:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.5 Medium
AI Score
Confidence
Low
0.008 Low
EPSS
Percentile
81.4%
Related for CVE-2008-6955