Lucene search

K
nvd[email protected]NVD:CVE-2001-1003
HistoryAug 31, 2001 - 4:00 a.m.

CVE-2001-1003

2001-08-3104:00:00
web.nvd.nist.gov
2

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.5

Confidence

Low

EPSS

0

Percentile

0.4%

Respondus 1.1.2 for WebCT uses weak encryption to remember usernames and passwords, which allows local users who can read the WEBCT.SVR file to decrypt the passwords and gain additional privileges.

Affected configurations

Nvd
Node
webctrespondusMatch1.1.2
VendorProductVersionCPE
webctrespondus1.1.2cpe:2.3:a:webct:respondus:1.1.2:*:*:*:*:*:*:*

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.5

Confidence

Low

EPSS

0

Percentile

0.4%

Related for NVD:CVE-2001-1003