Lucene search
HistoryJan 13, 2006 - 11:03 p.m.
CVE-2006-0202
CVSS2
3.6
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:P/A:N
AI Score
6.1
Confidence
High
EPSS
0
Percentile
5.1%
Dave Nielsen and Patrick Breitenbach PayPal Web Services (aka PHP Toolkit) 0.50 and possibly earlier has (1) world-readable permissions for ipn/logs/ipn_success.txt, which allows local users to view sensitive information (payment data), and (2) world-writable permissions for ipn/logs, which allows local users to delete or replace payment data.
Affected configurations
Node
paypalphp_toolkitRange≤0.50
| Vendor | Product | Version | CPE |
|---|---|---|---|
| paypal | php_toolkit | * | cpe:2.3:a:paypal:php_toolkit:*:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2006-0202
2006-01-13 23:03:00
cvelist
cvelist
CVE-2006-0202
2006-01-13 23:00:00
prion
prion
Code injection
2006-01-13 23:03:00
CVSS2
3.6
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:P/A:N
AI Score
6.1
Confidence
High
EPSS
0
Percentile
5.1%
Related for NVD:CVE-2006-0202