5
CVSSv2

CVE-2004-1786

Published: 04/01/2004 Updated: 11/07/2017
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 505
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

PortalApp places user credentials under the web root with insufficient access control, which allows remote malicious users to gain access to sensitive information via a direct request to 8275.mdb.

Vulnerable Product Search on Vulmon Subscribe to Product

iatek portalapp

Exploits

source: wwwsecurityfocuscom/bid/9354/info A problem has been identified in ASPapp PortalApp when user credentials are stored on a system Because of this, an attacker may be able to gain unauthorized access to sensitive information wwwexamplecom/APP Portall/data/8275mdb ...