vulnwire
4.3med

CVE-2004-27481 exploit

viewreport.pl in NetIQ WebTrends Reporting Center Enterprise Edition 6.1a allows remote attackers to determine the installation path via an…

Published 21 y ago · modified 4 mo ago · JSON

CVSS
4.3
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
4.8%
percentile 92%
Public exploits
1
Exploit-DB

viewreport.pl in NetIQ WebTrends Reporting Center Enterprise Edition 6.1a allows remote attackers to determine the installation path via an invalid profileid parameter, which leaks the pathname in an error message.

Exploit prediction (EPSS)

4.81% probability of exploitation in the next 30 days, higher than 92% of all scored CVEs.

Exploits and detections

  • EDB-23559 WebTrends Reporting Center 6.1 Management Interface - Full Path Disclosure · remote · 2004-01-20

CVSS scores

Assigned byVersionScoreVector
NVD2.04.3AV:N/AC:M/Au:N/C:P/I:N/A:N

Classification

Weakness
  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

References

  • securityfocus.com /archive/1/350419/30/21610/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • secunia.com /advisories/10689 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • securitytracker.com /id?1008799 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • osvdb.org /3680 · vdb-entry, x_refsource_OSVDB, x_transferred
  • securityreason.com /securityalert/3354 · third-party-advisory, x_refsource_SREASON, x_transferred
  • securityfocus.com /bid/9460 · vdb-entry, x_refsource_BID, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.