VulnerabilityModified
CVE-2001-0870
HTTP server in Alchemy Eye and Alchemy Network Monitor 1.9x through 2.6.18 is enabled without authentication by default, which allows remote attackers to obtain network monitoring logs with potentially sensitive information by directly requesting the…
MEDIUM 5.0EPSS 2.41%
Does this matter?
Lower severity and a low EPSS score (2.41%). Track it; it rarely justifies an emergency change on its own.
Description
HTTP server in Alchemy Eye and Alchemy Network Monitor 1.9x through 2.6.18 is enabled without authentication by default, which allows remote attackers to obtain network monitoring logs with potentially sensitive information by directly requesting the eye.ini file.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
- EPSS
- 2.41% probability · 83th percentile
- CISA KEV
- Not listed
- Affected
- alchemy lab/alchemy eye · dek software/alchemy network monitor
- Source
- cve@mitre.org
References
- http://marc.info/?l=bugtraq&m=100715758109838&w=2
- http://www.securityfocus.com/bid/3598Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7630
- http://marc.info/?l=bugtraq&m=100715758109838&w=2
- http://www.securityfocus.com/bid/3598Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7630
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.