CVE-2007-0928

2007-02-1411:00:00

mitre

www.cve.org

AI Score

6.5

Confidence

Low

EPSS

0.01

Percentile

83.5%

JSON

Virtual Calendar stores sensitive information under the web root with insufficient access control, which allows remote attackers to download an encoded password via a direct request for pwd.txt.

References

osvdb.org/33183

secunia.com/advisories/24125

securityreason.com/securityalert/2240

www.securityfocus.com/archive/1/459844/100/0/threaded

exchange.xforce.ibmcloud.com/vulnerabilities/32446