CVE-2006-1386

2006-03-2622:00:00

mitre

www.cve.org

AI Score

6.6

Confidence

Low

EPSS

0.013

Percentile

86.2%

JSON

The (1) rdiff and (2) preview scripts in TWiki 4.0 and 4.0.1 ignore access control settings, which allows remote attackers to read restricted areas and access restricted content in TWiki topics.

References

secunia.com/advisories/19410

securitytracker.com/id?1015843

twiki.org/cgi-bin/view/Codev/SecurityAlertTWiki4RdiffPreviewAccess

www.securityfocus.com/bid/17268

www.vupen.com/english/advisories/2006/1116

exchange.xforce.ibmcloud.com/vulnerabilities/25444