5

CVE-2004-0917

Exploit

EPSS 0.62%
Veröffentlicht 27.01.2005 05:00:00
Zuletzt bearbeitet 03.04.2025 01:03:51
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

The default installation of Vignette Application Portal installs the diagnostic utility without authentication requirements, which allows remote attackers to gain sensitive information, such as server and OS version, and conduct unauthorized activities via an HTTP request to /diag.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 7

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Vignette ≫ Application Portal

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.62%	0.69

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

http://securitytracker.com/id?1011447

http://www.atstake.com/research/advisories/2004/a092804-1.txt

Vendor Advisory

Exploit

http://www.securityfocus.com/bid/11267

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/17530

https://nvd.nist.gov/vuln/detail/CVE-2004-0917

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2004-0917

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2004-0917

EUVD