Lucene search
HistoryOct 09, 2007 - 10:00 a.m.
CVE-2004-2734
cve-2004-2734
novell
netware
web manager
access control
remote attackers
nvd
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
6.8 Medium
AI Score
Confidence
Low
0.023 Low
EPSS
Percentile
89.7%
webadmin-apache.conf in Novell Web Manager of Novell NetWare 6.5 uses an uppercase Alias tag with an inconsistent lowercase directory tag for a volume, which allows remote attackers to bypass access control to the WEB-INF folder.
Affected configurations
Node
novellnetwareMatch6.5
ORnovellnetwareMatch6.5sp1
ORnovellnetwareMatch6.5sp1.1a
ORnovellnetwareMatch6.5sp1.1b
| CPE | Name | Operator | Version |
|---|---|---|---|
| novell:netware | novell netware | eq | 6.5 |
Related
nvd
nvd
CVE-2004-2734
2004-12-31 05:00:00
cvelist
cvelist
CVE-2004-2734
2007-10-09 10:00:00
openvas
openvas
'/WEB-INF/' Information Disclosure Vulnerability (HTTP)
2021-02-11 00:00:00
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
6.8 Medium
AI Score
Confidence
Low
0.023 Low
EPSS
Percentile
89.7%
Related for CVE-2004-2734