CVE-2006-1386

EPSS 1.2%
Veröffentlicht 26.03.2006 22:02:00
Zuletzt bearbeitet 03.04.2025 01:03:51
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

The (1) rdiff and (2) preview scripts in TWiki 4.0 and 4.0.1 ignore access control settings, which allows remote attackers to read restricted areas and access restricted content in TWiki topics.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 9

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Twiki ≫ Twiki Version4.0

Twiki ≫ Twiki Version4.0.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.2%	0.778

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

http://secunia.com/advisories/19410

http://securitytracker.com/id?1015843

http://twiki.org/cgi-bin/view/Codev/SecurityAlertTWiki4RdiffPreviewAccess

http://www.securityfocus.com/bid/17268

http://www.vupen.com/english/advisories/2006/1116

https://exchange.xforce.ibmcloud.com/vulnerabilities/25444

https://nvd.nist.gov/vuln/detail/CVE-2006-1386

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2006-1386

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2006-1386

EUVD