Lucene search
HistoryJul 25, 2006 - 1:22 p.m.
CVE-2006-3831
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.2
Confidence
Low
EPSS
0.01
Percentile
84.0%
The Backup selection in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier uses predicable filenames for database backups and stores the files under the web root with insufficient access control, which allows remote attackers to obtain sensitive information by downloading a backup file.
Affected configurations
Node
kailash_nadhboastmachineRange≤3.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| kailash_nadh | boastmachine | * | cpe:2.3:a:kailash_nadh:boastmachine:*:*:*:*:*:*:*:* |
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.2
Confidence
Low
EPSS
0.01
Percentile
84.0%
Related for NVD:CVE-2006-3831