Lucene search
HistoryOct 04, 2002 - 4:00 a.m.
CVE-2002-1058
cve
2002
1058
directory traversal
vulnerability
splashadmin.php
cobalt qube 3.0
local users
remote attackers
privileges
sessionid cookie
alternate session file
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.2 High
AI Score
Confidence
Low
0.018 Low
EPSS
Percentile
88.4%
Directory traversal vulnerability in splashAdmin.php for Cobalt Qube 3.0 allows local users and remote attackers, to gain privileges as the Qube Admin via … (dot dot) sequences in the sessionId cookie that point to an alternate session file.
Affected configurations
Node
cobaltqubeMatch3.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| cobalt:qube | cobalt qube | eq | 3.0 |
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.2 High
AI Score
Confidence
Low
0.018 Low
EPSS
Percentile
88.4%
Related for CVE-2002-1058