VulnerabilityModified
CVE-2007-2638
eFileCabinet 3.3 allows remote attackers to bypass authentication and access restricted portions of the interface via an invalid filecabinetnumber, which can be leveraged to obtain sensitive information or create new data structures.
HIGH 10.0EPSS 2.58%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (2.58%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
eFileCabinet 3.3 allows remote attackers to bypass authentication and access restricted portions of the interface via an invalid filecabinetnumber, which can be leveraged to obtain sensitive information or create new data structures.
- CVSS 2.0
- 10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
- EPSS
- 2.58% probability · 84th percentile
- CISA KEV
- Not listed
- Affected
- efilecabinet/efilecabinet
- Source
- cve@mitre.org
References
- http://osvdb.org/34774
- http://securityreason.com/securityalert/2696
- http://www.securityfocus.com/archive/1/468314/100/0/threaded
- http://www.securityfocus.com/bid/23944
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34251
- http://osvdb.org/34774
- http://securityreason.com/securityalert/2696
- http://www.securityfocus.com/archive/1/468314/100/0/threaded
- http://www.securityfocus.com/bid/23944
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34251
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.