Lucene search

K
nvd[email protected]NVD:CVE-2003-1553
HistoryDec 31, 2003 - 5:00 a.m.

CVE-2003-1553

2003-12-3105:00:00
CWE-200
web.nvd.nist.gov
8

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

AI Score

6.4

Confidence

Low

EPSS

0.01

Percentile

83.6%

Haakon Nilsen Simple Internet Publishing System (SIPS) 0.2.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain password and other user information via a direct request to a user-specific configuration directory.

Affected configurations

Nvd
Node
sipssipsMatch0.2.2
VendorProductVersionCPE
sipssips0.2.2cpe:2.3:a:sips:sips:0.2.2:*:*:*:*:*:*:*

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

AI Score

6.4

Confidence

Low

EPSS

0.01

Percentile

83.6%

Related for NVD:CVE-2003-1553