Lucene search

K
cvelistMitreCVELIST:CVE-2002-2389
HistoryOct 31, 2007 - 4:00 p.m.

CVE-2002-2389

2007-10-3116:00:00
mitre
www.cve.org
1
theserver 1.74 web server
server.ini
insufficient access control
unauthorized access
cleartext passwords
server log files
remote attackers

AI Score

6.8

Confidence

Low

EPSS

0.011

Percentile

84.7%

TheServer 1.74 web server stores server.ini under the web document root with insufficient access control, which allows remote attackers to obtain cleartext passwords and gain access to server log files.

AI Score

6.8

Confidence

Low

EPSS

0.011

Percentile

84.7%

Related for CVELIST:CVE-2002-2389