Lucene search

MitreCVE-2008-4115

HistorySep 16, 2008 - 11:00 p.m.

CVE-2008-4115

2008-09-1623:00:01

CWE-200

mitre

web.nvd.nist.gov

talkback

remote attackers

configuration information

direct request

phpinfo

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.3

Confidence

Low

EPSS

0.003

Percentile

71.1%

JSON

TalkBack 2.3.6 allows remote attackers to obtain configuration information via a direct request to install/info.php, which calls the phpinfo function.

Affected configurations

Nvd

Node

talkbacktalkbackMatch2.3.6

VendorProductVersionCPE
talkbacktalkback2.3.6cpe:2.3:a:talkback:talkback:2.3.6:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
talkback	talkback	2.3.6	cpe:2.3:a:talkback:talkback:2.3.6:::::::*

References

securityreason.com/securityalert/4267

exchange.xforce.ibmcloud.com/vulnerabilities/45103

www.exploit-db.com/exploits/6451

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.3

Confidence

Low

EPSS

0.003

Percentile

71.1%

JSON

Related for CVE-2008-4115