6.2 Medium
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
76.3%
Microsoft Internet Information Server (IIS) 5.1 allows remote attackers to view path information via a GET request to (1) /_vti_pvt/access.cnf, (2) /_vti_pvt/botinfs.cnf, (3) /_vti_pvt/bots.cnf, or (4) /_vti_pvt/linkinfo.cnf.
online.securityfocus.com/archive/1/255555
online.securityfocus.com/archive/1/256125
www.securityfocus.com/bid/4078
exchange.xforce.ibmcloud.com/vulnerabilities/8174