VulnerabilityModified

CVE-2006-6583

ScriptMate User Manager 2.1 and earlier allow remote attackers to obtain sensitive information via unspecified vectors related to (1) the Logins box and (2) the Search box.

HIGH 7.5EPSS 1.40%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (1.40%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

ScriptMate User Manager 2.1 and earlier allow remote attackers to obtain sensitive information via unspecified vectors related to (1) the Logins box and (2) the Search box.

CVSS 2.0: 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS: 1.40% probability · 71th percentile
CISA KEV: Not listed
Affected: scriptmate/user manager
Source: cve@mitre.org

References

http://securitytracker.com/id?1017384Exploit
http://www.hackerscenter.com/archive/view.asp?id=26656Exploit
http://securitytracker.com/id?1017384Exploit
http://www.hackerscenter.com/archive/view.asp?id=26656Exploit

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.