Lucene search
HistoryJan 29, 2012 - 4:04 a.m.
CVE-2011-5067
CVSS2
4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
AI Score
5.8
Confidence
Low
EPSS
0.002
Percentile
55.1%
move_uploaded_file.php in Support Incident Tracker (aka SiT!) 3.65 allows remote authenticated users to obtain sensitive information via the file name, which reveals the installation path in an error message.
Affected configurations
Node
sitrackersupport_incident_trackerMatch3.65
| Vendor | Product | Version | CPE |
|---|---|---|---|
| sitracker | support_incident_tracker | 3.65 | cpe:2.3:a:sitracker:support_incident_tracker:3.65:*:*:*:*:*:*:* |
References
Related
cvelist
cvelist
CVE-2011-5067
2012-01-29 02:00:00
prion
prion
Information disclosure
2012-01-29 04:04:00
cve
cve
CVE-2011-5067
2012-01-29 04:04:44
CVSS2
4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
AI Score
5.8
Confidence
Low
EPSS
0.002
Percentile
55.1%
Related for NVD:CVE-2011-5067