5

CVE-2005-4021

The installer for Gallery 2.0 before 2.0.2 stores the install log under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Gallery Project ≫ Gallery Version 2.0
Gallery Project ≫ Gallery Version 2.0.1
Gallery Project ≫ Gallery Version 2.0_alpha1
Gallery Project ≫ Gallery Version 2.0_alpha2
Gallery Project ≫ Gallery Version 2.0_alpha3
Gallery Project ≫ Gallery Version 2.0_alpha4
Gallery Project ≫ Gallery Version 2.0_beta1
Gallery Project ≫ Gallery Version 2.0_beta2
Gallery Project ≫ Gallery Version 2.0_beta3
Gallery Project ≫ Gallery Version 2.0_rc1
Gallery Project ≫ Gallery Version 2.0_rc2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.41% 0.691
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.securityfocus.com/archive/1/418200/100/0/threaded
http://www.securityfocus.com/bid/15614
http://www.vupen.com/english/advisories/2005/2681