Lucene search

K
cvelistMitreCVELIST:CVE-2002-1886
HistoryOct 03, 2022 - 4:23 p.m.

CVE-2002-1886

2022-10-0316:23:48
mitre
www.cve.org
tightauction 3.0
config.inc
access control
vulnerability
database
username
password

6.7 Medium

AI Score

Confidence

Low

0.027 Low

EPSS

Percentile

90.4%

TightAuction 3.0 stores config.inc under the web document root with insufficient access control, which allows remote attackers to obtain the database username and password.

6.7 Medium

AI Score

Confidence

Low

0.027 Low

EPSS

Percentile

90.4%

Related for CVELIST:CVE-2002-1886