VulnerabilityModified
CVE-2005-4249
ADP Forum 2.0 through 2.0.3 stores sensitive information in plaintext files under the web document root with insufficient access control, which allows remote attackers to obtain user credentials via requests to the forum/users directory.
MEDIUM 5.0EPSS 1.79%
Does this matter?
Lower severity and a low EPSS score (1.79%). Track it; it rarely justifies an emergency change on its own.
Description
ADP Forum 2.0 through 2.0.3 stores sensitive information in plaintext files under the web document root with insufficient access control, which allows remote attackers to obtain user credentials via requests to the forum/users directory.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
- EPSS
- 1.79% probability · 77th percentile
- CISA KEV
- Not listed
- Affected
- adp/adp forum
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/18027Vendor Advisory
- http://securityreason.com/securityalert/253
- http://www.blogcu.com/Liz0ziM/144336/Exploit, Vendor Advisory, URL Repurposed
- http://www.securityfocus.com/archive/1/419393/100/0/threaded
- http://secunia.com/advisories/18027Vendor Advisory
- http://securityreason.com/securityalert/253
- http://www.blogcu.com/Liz0ziM/144336/Exploit, Vendor Advisory, URL Repurposed
- http://www.securityfocus.com/archive/1/419393/100/0/threaded
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.