Beveiligingsadvies

CVE-2005-2956

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2005-09-16 04:00:00

Laatst bijgewerkt 2024-08-07 22:53:29

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

ATutor 1.5.1, and possibly earlier versions, stores temporary chat logs under the web document root with insufficient access control and predictable filenames, which allows remote attackers to obtain user chat conversations via direct requests to those files.

← Alle CVE's bekijken Bekijk op cve.org ↗