Lucene search
HistoryJul 26, 2002 - 4:00 a.m.
CVE-2002-0409
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.8
Confidence
Low
EPSS
0.946
Percentile
99.3%
orderdetails.aspx, as made available to Microsoft .NET developers as example code and demonstrated on www.ibuyspystore.com, allows remote attackers to view the orders of other users by modifying the OrderID parameter.
Affected configurations
Node
microsoft.net_frameworkMatch1.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| microsoft | .net_framework | 1.0 | cpe:2.3:a:microsoft:.net_framework:1.0:*:*:*:*:*:*:* |
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.8
Confidence
Low
EPSS
0.946
Percentile
99.3%
Related for NVD:CVE-2002-0409