Lucene search

K
cveMitreCVE-1999-1374
HistoryMay 02, 2005 - 4:00 a.m.

CVE-1999-1374

2005-05-0204:00:00
mitre
web.nvd.nist.gov
36
cve-1999-1374
information security
perlshop.cgi
sensitive data exposure
http request
remote attack
nvd

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.3

Confidence

Low

EPSS

0.005

Percentile

75.7%

perlshop.cgi shopping cart program stores sensitive customer information in directories and files that are under the web root, which allows remote attackers to obtain that information via an HTTP request.

Affected configurations

Nvd
Node
arpanetperlshop
VendorProductVersionCPE
arpanetperlshop*cpe:2.3:a:arpanet:perlshop:*:*:*:*:*:*:*:*

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.3

Confidence

Low

EPSS

0.005

Percentile

75.7%

Related for CVE-1999-1374