5
CVSSv2

CVE-2002-0583

Published: 18/06/2002 Updated: 05/09/2008
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

WorkforceROI Xpede 4.1 uses a small random namespace (5 alphanumeric characters) for temporary expense claim reports in the /reports/temp directory, which allows remote malicious users to read the reports via a brute force attack.

Vulnerable Product Search on Vulmon Subscribe to Product

workforceroi xpede 4.1