VulnerabilityModified
CVE-2006-0174
Hummingbird Collaboration (aka Hummingbird Enterprise Collaboration) 5.21 and earlier allows remote attackers to obtain sensitive information (intranet IP addresses and enumerations of valid parameter values) via a direct request to hc, which reveals…
MEDIUM 4.0EPSS 2.82%
Does this matter?
Lower severity and a low EPSS score (2.82%). Track it; it rarely justifies an emergency change on its own.
Description
Hummingbird Collaboration (aka Hummingbird Enterprise Collaboration) 5.21 and earlier allows remote attackers to obtain sensitive information (intranet IP addresses and enumerations of valid parameter values) via a direct request to hc, which reveals the information in an error message or a cookie.
- CVSS 2.0
- 4.0 MEDIUMAV:N/AC:L/Au:S/C:P/I:N/A:N
- EPSS
- 2.82% probability · 86th percentile
- CISA KEV
- Not listed
- Affected
- hummingbird/collaboration · hummingbird/enterprise collaboration
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/18411
- http://securityreason.com/securityalert/328
- http://www.securenetwork.it/advisories/sn-2006-01.htmlExploit
- http://www.securityfocus.com/archive/1/421392/100/0/threaded
- http://www.securityfocus.com/bid/16195Exploit
- http://www.vupen.com/english/advisories/2006/0145
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24069
- http://secunia.com/advisories/18411
- http://securityreason.com/securityalert/328
- http://www.securenetwork.it/advisories/sn-2006-01.htmlExploit
- http://www.securityfocus.com/archive/1/421392/100/0/threaded
- http://www.securityfocus.com/bid/16195Exploit
- http://www.vupen.com/english/advisories/2006/0145
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24069
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.