Lucene search
HistoryMar 02, 2007 - 9:18 p.m.
CVE-2007-1187
webapp
cve-2007-1187
information security
sensitive information
remote authenticated users
forum archive
recent searches
5.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:P/A:N
5.8 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
65.6%
WebAPP before 0.9.9.5 allows remote authenticated users, without admin privileges, to obtain sensitive information via (1) the Forum Archive feature and (2) Recent Searches.
Affected configurations
Node
web-app.orgwebappMatch0.9.9
ORweb-app.orgwebappMatch0.9.9.1
ORweb-app.orgwebappMatch0.9.9.2
ORweb-app.orgwebappMatch0.9.9.2.1
ORweb-app.orgwebappMatch0.9.9.3
ORweb-app.orgwebappMatch0.9.9.3.1
ORweb-app.orgwebappMatch0.9.9.3.2
ORweb-app.orgwebappMatch0.9.9.4
Related
nvd
nvd
CVE-2007-1187
2007-03-02 21:18:00
prion
prion
Design/Logic Flaw
2007-03-02 21:18:00
cvelist
cvelist
CVE-2007-1187
2007-02-28 16:00:00
securityvulns
securityvulns
5.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:P/A:N
5.8 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
65.6%
Related for CVE-2007-1187