VulnerabilityModified
CVE-2003-1363
The remote web management interface of Aprelium Technologies Abyss Web Server 1.1.2 and earlier does not log connection attempts to the web management port (9999), which allows remote attackers to mount brute force attacks on the administration console…
MEDIUM 6.4EPSS 1.17%
Does this matter?
Lower severity and a low EPSS score (1.17%). Track it; it rarely justifies an emergency change on its own.
Description
The remote web management interface of Aprelium Technologies Abyss Web Server 1.1.2 and earlier does not log connection attempts to the web management port (9999), which allows remote attackers to mount brute force attacks on the administration console without detection.
- CVSS 2.0
- 6.4 MEDIUMAV:N/AC:L/Au:N/C:P/I:P/A:N
- EPSS
- 1.17% probability · 66th percentile
- CISA KEV
- Not listed
- Affected
- aprelium technologies/abyss web server
- Source
- cve@mitre.org
References
- http://archives.neohapsis.com/archives/bugtraq/2003-02/0149.html
- http://www.iss.net/security_center/static/11310.php
- http://www.securityfocus.com/bid/6842
- http://archives.neohapsis.com/archives/bugtraq/2003-02/0149.html
- http://www.iss.net/security_center/static/11310.php
- http://www.securityfocus.com/bid/6842
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.