Lucene search
HistoryMay 16, 2007 - 7:28 p.m.
CVE-2007-2441
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.7
Confidence
Low
EPSS
0.018
Percentile
88.2%
Caucho Resin Professional 3.1.0 and Caucho Resin 3.1.0 and earlier for Windows allows remote attackers to obtain the system path via certain URLs associated with (1) deploying web applications or (2) displaying .xtp files.
Affected configurations
Node
caucho_technologyresinRange≤3.1.0professional_windows
ORcaucho_technologyresinRange≤3.1.0windows
| Vendor | Product | Version | CPE |
|---|---|---|---|
| caucho_technology | resin | * | cpe:2.3:a:caucho_technology:resin:*:*:professional_windows:*:*:*:*:* |
| caucho_technology | resin | * | cpe:2.3:a:caucho_technology:resin:*:*:windows:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2007-2441
2007-05-16 19:00:00
exploitdb
exploitdb
Caucho Resin 3.1 - Encoded Space Request Full Path Disclosure
2007-05-15 00:00:00
cve
cve
CVE-2007-2441
2007-05-16 19:28:00
prion
prion
Design/Logic Flaw
2007-05-16 19:28:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.7
Confidence
Low
EPSS
0.018
Percentile
88.2%
Related for NVD:CVE-2007-2441