CVE-2002-0537 in SWS

Riassunto

di MITRE

The admin.html file in StepWeb Search Engine (SWS) 2.5 stores passwords in links to manager.pl, which allows remote attackers who can access the admin.html file to gain administrative privileges to SWS.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Divulgazione: 03/07/2002
• Moderazione: accettato
• Voce: VDB-18357
• CPE: pronto
• CWE: CWE-200 (confermato)
• CVSS: 10.0 (NVD)
• EPSS: 0.03115
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2002-0537
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2002-0537
• CVE Details: https://www.cvedetails.com/cve/CVE-2002-0537/