PT-2007-7146

CVE-2007-6271

Published

2007-12-07

Updated

2018-10-15

Description by

CVSS 2.0

5.0

Medium

MetricsAV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Absolute News Manager.NET version 5.1

Description The issue allows remote attackers to obtain sensitive information. This is achieved via a direct request to "getpath.aspx", which reveals the installation path in an error message.

Recommendations For Absolute News Manager.NET version 5.1, consider restricting access to the "getpath.aspx" page to minimize the risk of exploitation.

Exploitability

Exploit

Fix

Impacts

Researchers

Adrian Pastor

Jan Fry

Richard Brain

Vendors

Affected products

Weakness enumeration

CWE-20: Improper Input Validation