Lucene search

K
kasperskyKaspersky LabKLA10391
HistoryAug 03, 2005 - 12:00 a.m.

KLA10391 CI vulnerability in WebInspect

2005-08-0300:00:00
Kaspersky Lab
threats.kaspersky.com
24

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

7.2 High

AI Score

Confidence

Low

0.031 Low

EPSS

Percentile

91.1%

An XAS vulnerability was found in WebInspect. By exploiting this vulnerability malicious users can inject from one application to another. This vulnerability can be exploited remotely.

Original advisories

Related products

WebInspect

CVE list

CVE-2005-2442 critical

Solution

Update to latest version

Impacts

  • CI

Code injection. Exploitation of vulnerabilities with this impact can lead to changes in target code.

Affected Products

  • SPI Dynamics WebInspect version 5.0.196

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

7.2 High

AI Score

Confidence

Low

0.031 Low

EPSS

Percentile

91.1%

Related for KLA10391