| |
Vulnerability CVE-2005-2285
Published: 2005-07-18 Modified: 2012-02-12
| Description: |
WebEOC before 6.0.2 stores sensitive information in locations such as URIs, web pages, and configuration files, which allows remote attackers to obtain information such as Usernames, Passwords, Emergency information, medical information, and system configuration. |
CVSS2 => (AV:N/AC:L/Au:N/C:P/I:N/A:N)
| CVSS Base Score |
Impact Subscore |
Exploitability Subscore |
5/10 |
2.9/10 |
10/10 |
| Exploit range |
Attack complexity |
Authentication |
Remote |
Low |
No required |
| Confidentiality impact |
Integrity impact |
Availability impact |
Partial |
None |
None |
References: |
http://www.kb.cert.org/vuls/id/165290
http://www.kb.cert.org/vuls/id/JGEI-6BWPXL
|
|
|
Copyright 2024, cxsecurity.com
|
|
|
