CVE-2008-6375

2009-03-0219:00:00

mitre

www.cve.org

AI Score

6.3

Confidence

Low

EPSS

0.002

Percentile

58.7%

JSON

JBook stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request to userids.mdb.

References

packetstormsecurity.org/0812-exploits/jbook-disclosesql.txt

exchange.xforce.ibmcloud.com/vulnerabilities/47034