PT-2007-7146

CVE-2007-6271

Publicado

2007-12-07

Atualizado

2018-10-15

Descrição por

CVSS 2.0

5.0

Média

MétricasAV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Absolute News Manager.NET version 5.1

Description The issue allows remote attackers to obtain sensitive information. This is achieved via a direct request to "getpath.aspx", which reveals the installation path in an error message.

Recommendations For Absolute News Manager.NET version 5.1, consider restricting access to the "getpath.aspx" page to minimize the risk of exploitation.

Explorabilidade

Exploit

Correção

Impactos

Pesquisadores

Adrian Pastor

Jan Fry

Richard Brain

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-20: Improper Input Validation