Improper access control

2009-03-0219:30:00

PRIOn knowledge base

www.prio-n.com

6.9 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.8%

JSON

Rapid Classified 3.1 and 3.15 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request to cldb.mdb.

CPENameOperatorVersion
rapid_classifiedeq3.1
rapid_classifiedeq3.15

CPE	Name	Operator	Version
	rapid_classified	eq	3.1
	rapid_classified	eq	3.15

References

exchange.xforce.ibmcloud.com/vulnerabilities/47016

www.exploit-db.com/exploits/7324