Lucene search
HistoryJan 29, 2012 - 4:04 a.m.
CVE-2011-5067
4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
5.8 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
47.2%
move_uploaded_file.php in Support Incident Tracker (aka SiT!) 3.65 allows remote authenticated users to obtain sensitive information via the file name, which reveals the installation path in an error message.
Affected configurations
Node
sitrackersupport_incident_trackerMatch3.65
References
Related
cve
cve
CVE-2011-5067
2022-10-03 16:15:11
prion
prion
Information disclosure
2012-01-29 04:04:00
cvelist
cvelist
CVE-2011-5067
2022-10-03 16:15:11
4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
5.8 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
47.2%
Related for NVD:CVE-2011-5067