Lucene search
MitreCVE-2003-0593HistoryApr 15, 2004 - 4:00 a.m.
CVE-2003-0593
2004-04-1504:00:00
CWE-22
mitre
web.nvd.nist.gov
30
opera
cookie access
security
directory traversal
url
vulnerability
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.7
Confidence
Low
EPSS
0.021
Percentile
89.2%
Opera allows remote attackers to bypass intended cookie access restrictions on a web application via “%2e%2e” (encoded dot dot) directory traversal sequences in a URL, which causes Opera to send the cookie outside the specified URL subsets, e.g. to a vulnerable application that runs on the same server as the target application.
Affected configurations
Node
operaopera_browserMatch5.0
ORoperaopera_browserMatch5.02
ORoperaopera_browserMatch5.10
ORoperaopera_browserMatch5.11
ORoperaopera_browserMatch5.12
ORoperaopera_browserMatch6.0
ORoperaopera_browserMatch6.01
ORoperaopera_browserMatch6.02
ORoperaopera_browserMatch6.03
ORoperaopera_browserMatch6.04
ORoperaopera_browserMatch6.05
ORoperaopera_browserMatch6.06
ORoperaopera_browserMatch6.10
ORoperaopera_browserMatch7.0
ORoperaopera_browserMatch7.0beta1
ORoperaopera_browserMatch7.0beta2
ORoperaopera_browserMatch7.01
ORoperaopera_browserMatch7.02
ORoperaopera_browserMatch7.03
ORoperaopera_browserMatch7.10
ORoperaopera_browserMatch7.11
ORoperaopera_browserMatch7.20
ORoperaopera_browserMatch7.21
ORoperaopera_browserMatch7.22
ORoperaopera_browserMatch7.23
| Vendor | Product | Version | CPE |
|---|---|---|---|
| opera | opera_browser | 5.0 | cpe:2.3:a:opera:opera_browser:5.0:*:*:*:*:*:*:* |
| opera | opera_browser | 5.02 | cpe:2.3:a:opera:opera_browser:5.02:*:*:*:*:*:*:* |
| opera | opera_browser | 5.10 | cpe:2.3:a:opera:opera_browser:5.10:*:*:*:*:*:*:* |
| opera | opera_browser | 5.11 | cpe:2.3:a:opera:opera_browser:5.11:*:*:*:*:*:*:* |
| opera | opera_browser | 5.12 | cpe:2.3:a:opera:opera_browser:5.12:*:*:*:*:*:*:* |
| opera | opera_browser | 6.0 | cpe:2.3:a:opera:opera_browser:6.0:*:*:*:*:*:*:* |
| opera | opera_browser | 6.01 | cpe:2.3:a:opera:opera_browser:6.01:*:*:*:*:*:*:* |
| opera | opera_browser | 6.02 | cpe:2.3:a:opera:opera_browser:6.02:*:*:*:*:*:*:* |
| opera | opera_browser | 6.03 | cpe:2.3:a:opera:opera_browser:6.03:*:*:*:*:*:*:* |
| opera | opera_browser | 6.04 | cpe:2.3:a:opera:opera_browser:6.04:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2003-0593
2004-03-16 05:00:00
nvd
nvd
CVE-2003-0593
2004-04-15 04:00:00
securityvulns
securityvulns
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.7
Confidence
Low
EPSS
0.021
Percentile
89.2%
Related for CVE-2003-0593