Lucene search

K
nvd[email protected]NVD:CVE-2002-1428
HistoryApr 11, 2003 - 4:00 a.m.

CVE-2002-1428

2003-04-1104:00:00
web.nvd.nist.gov

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

6.9 Medium

AI Score

Confidence

Low

0.028 Low

EPSS

Percentile

90.7%

index.php in dotProject 0.2.1.5 allows remote attackers to bypass authentication via a cookie or URL with the user_cookie parameter set to 1.

Affected configurations

NVD
Node
dotprojectdotprojectMatch0.2.1.5

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

6.9 Medium

AI Score

Confidence

Low

0.028 Low

EPSS

Percentile

90.7%

Related for NVD:CVE-2002-1428