Lucene search

K
cveFlexeraCVE-2011-3829
HistoryJan 29, 2012 - 4:04 a.m.

CVE-2011-3829

2012-01-2904:04:44
CWE-200
flexera
web.nvd.nist.gov
33
cve-2011-3829
sit!
sensitive information disclosure
ftp
support incident tracker

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

AI Score

5.7

Confidence

Low

EPSS

0.012

Percentile

85.2%

ftp_upload_file.php in Support Incident Tracker (aka SiT!) 3.65 allows remote authenticated users to obtain sensitive information via the file name, which reveals the installation path in an error message.

Affected configurations

Nvd
Node
sitrackersupport_incident_trackerMatch3.65
VendorProductVersionCPE
sitrackersupport_incident_tracker3.65cpe:2.3:a:sitracker:support_incident_tracker:3.65:*:*:*:*:*:*:*

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

AI Score

5.7

Confidence

Low

EPSS

0.012

Percentile

85.2%