CVE-2004-1607

2005-02-2005:00:00

mitre

www.cve.org

AI Score

6.1

Confidence

Low

EPSS

0.006

Percentile

78.3%

JSON

slxweb.dll in SalesLogix 6.1 allows remote attackers to obtain sensitive information via a (1) Library or (2) Attachment request with an invalid file parameter, which reveals the path in an error message.

References

archives.neohapsis.com/archives/fulldisclosure/2004-10/0661.html

marc.info/?l=bugtraq&m=109811852218478&w=2

secunia.com/advisories/12883

securitytracker.com/id?1011769

www.osvdb.org/10944

www.securityfocus.com/bid/11450

exchange.xforce.ibmcloud.com/vulnerabilities/17751