Lucene search
HistoryMar 18, 2003 - 5:00 a.m.
CVE-2002-1451
cve-2002-1451
blazix
security vulnerability
remote attackers
source code disclosure
web directory listing
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.8 Medium
AI Score
Confidence
Low
0.018 Low
EPSS
Percentile
88.2%
Blazix before 1.2.2 allows remote attackers to read source code of JSP scripts or list restricted web directories via an HTTP request that ends in a (1) “+” or (2) "" (backslash) character.
Affected configurations
Node
desiderata_softwareblazixMatch1.2
ORdesiderata_softwareblazixMatch1.2.1
Related
nessus
nessus
Blazix Trailing Character JSP Source Disclosure
2005-02-19 00:00:00
cvelist
cvelist
CVE-2002-1451
2003-03-18 05:00:00
nvd
nvd
CVE-2002-1451
2002-08-24 04:00:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.8 Medium
AI Score
Confidence
Low
0.018 Low
EPSS
Percentile
88.2%
Related for CVE-2002-1451