Lucene search

K
ubuntucveUbuntu.comUB:CVE-2006-1386
HistoryMar 26, 2006 - 12:00 a.m.

CVE-2006-1386

2006-03-2600:00:00
ubuntu.com
ubuntu.com
10

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.013

Percentile

86.2%

The (1) rdiff and (2) preview scripts in TWiki 4.0 and 4.0.1 ignore access
control settings, which allows remote attackers to read restricted areas
and access restricted content in TWiki topics.

Notes

Author Note
fujitsu Only affects 4.0.[01], which we never had.

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.013

Percentile

86.2%

Related for UB:CVE-2006-1386