Lucene search
HistoryFeb 10, 2005 - 5:00 a.m.
CVE-2005-0316
cve-2005-0316
webwasher classic
server mode
connect requests
access restrictions
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.7 Medium
AI Score
Confidence
Low
0.051 Low
EPSS
Percentile
93.0%
WebWasher Classic 2.2.1 and 3.3, when running in server mode, does not properly drop CONNECT requests to the localhost from external systems, which could allow remote attackers to bypass intended access restrictions.
Affected configurations
Node
webwasherwebwasher_classicMatch2.2.1
ORwebwasherwebwasher_classicMatch3.3
Related
cvelist
cvelist
CVE-2005-0316
2005-02-10 05:00:00
nvd
nvd
CVE-2005-0316
2005-01-28 05:00:00
nessus
nessus
WebWasher Classic Server Mode Arbitrary Proxy CONNECT Request
2005-01-31 00:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.7 Medium
AI Score
Confidence
Low
0.051 Low
EPSS
Percentile
93.0%
Related for CVE-2005-0316