Lucene search
HistoryAug 14, 2001 - 4:00 a.m.
CVE-2001-0555
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
6.5
Confidence
Low
EPSS
0.819
Percentile
98.4%
ScreamingMedia SITEWare versions 2.5 through 3.1 allows a remote attacker to read world-readable files via a … (dot dot) attack through (1) the SITEWare Editor’s Desktop or (2) the template parameter in SWEditServlet.
Affected configurations
Node
screaming_mediasitewareRange≤3.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| screaming_media | siteware | * | cpe:2.3:a:screaming_media:siteware:*:*:*:*:*:*:*:* |
References
Related
exploitdb
exploitdb
SiteWare 2.5/3.0/3.1 Editor Desktop - Directory Traversal
2001-06-13 00:00:00
cvelist
cvelist
CVE-2001-0555
2001-07-27 04:00:00
cert
cert
cve
cve
CVE-2001-0555
2001-08-14 04:00:00
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
6.5
Confidence
Low
EPSS
0.819
Percentile
98.4%
Related for NVD:CVE-2001-0555