CVE-2006-1386
Published Mar 26, 2006
Last updated 7 years ago
Overview
- Description
- The (1) rdiff and (2) preview scripts in TWiki 4.0 and 4.0.1 ignore access control settings, which allows remote attackers to read restricted areas and access restricted content in TWiki topics.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 7.5
- Impact score
- 6.4
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:twiki:twiki:4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A0E0A8F3-02EE-4A6D-BAAC-1D52DF063197"
},
{
"criteria": "cpe:2.3:a:twiki:twiki:4.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "47807C3A-8430-48E3-A7C8-C5A1FEDF84C0"
}
],
"operator": "OR"
}
]
}
]