VulnerabilityModified
CVE-2007-5063
Adam Scheinberg Flip 3.0 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a file containing login credentials via a direct request for var/users.txt.
MEDIUM 5.0EPSS 6.24%
Does this matter?
Lower severity and a low EPSS score (6.24%). Track it; it rarely justifies an emergency change on its own.
Description
Adam Scheinberg Flip 3.0 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a file containing login credentials via a direct request for var/users.txt.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
- EPSS
- 6.24% probability · 93th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-255
- Affected
- adam scheinberg/flip
- Source
- cve@mitre.org
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.