CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
Confidence
Low
EPSS
Percentile
60.1%
Directory traversal vulnerability in F-Secure Anti-Virus for Microsoft Exchange 6.40 and Internet Gatekeeper 6.40 to 6.42 allows limited remote attackers to bypass Web Console authentication and read files.
Vendor | Product | Version | CPE |
---|---|---|---|
f-secure | f-secure_anti-virus | 6.40 | cpe:2.3:a:f-secure:f-secure_anti-virus:6.40:*:ms_exchange:*:*:*:*:* |
f-secure | internet_gatekeeper | 6.4 | cpe:2.3:a:f-secure:internet_gatekeeper:6.4:*:*:*:*:*:*:* |
f-secure | internet_gatekeeper | 6.41 | cpe:2.3:a:f-secure:internet_gatekeeper:6.41:*:*:*:*:*:*:* |
f-secure | internet_gatekeeper | 6.42 | cpe:2.3:a:f-secure:internet_gatekeeper:6.42:*:*:*:*:*:*:* |