4.6med
CVE-2004-2481
MyProxy 6.58 allows remote authenticated users in the Users Tab to connect to arbitrary hosts from the MyProxy server, possibly bypassing a…
Published 21 y ago · modified 4 mo ago · JSON
CVSS
4.6
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
2.1%
percentile 82%
Public exploits
0
none known
Summary
MyProxy 6.58 allows remote authenticated users in the Users Tab to connect to arbitrary hosts from the MyProxy server, possibly bypassing access restrictions, by connecting to the proxy and issuing a CONNECT command.
Exploit prediction (EPSS)
2.11% probability of exploitation in the next 30 days, higher than 82% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 4.6 | AV:L/AC:L/Au:N/C:P/I:P/A:P |
References
- osvdb.org /12138 · vdb-entry, x_refsource_OSVDB, x_transferred
- securitylab.ru /vulnerability/source/210758.php · x_refsource_MISC, x_transferred
- exchange.xforce.ibmcloud.com /vulnerabilities/18265 · vdb-entry, x_refsource_XF, x_transferred
- securitytracker.com /alerts/2004/Nov/1012322.html · vdb-entry, x_refsource_SECTRACK, x_transferred
Sources
- CVE List: CVE-2004-2481
- NVD: CVE-2004-2481
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.