Lucene search
MitreCVE-2006-3831HistoryJul 25, 2006 - 1:22 p.m.
CVE-2006-3831
2006-07-2513:22:00
mitre
web.nvd.nist.gov
25
cve-2006-3831
kailash nadh boastmachine
bmachine
database backups
access control
sensitive information
remote attackers
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.6
Confidence
Low
EPSS
0.01
Percentile
84.0%
The Backup selection in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier uses predicable filenames for database backups and stores the files under the web root with insufficient access control, which allows remote attackers to obtain sensitive information by downloading a backup file.
Affected configurations
Node
kailash_nadhboastmachineRange≤3.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| kailash_nadh | boastmachine | * | cpe:2.3:a:kailash_nadh:boastmachine:*:*:*:*:*:*:*:* |
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.6
Confidence
Low
EPSS
0.01
Percentile
84.0%
Related for CVE-2006-3831