Information disclosure in Webtrends Reporting Center
CVE-2002-0596
WebTrends Reporting Center 4.0d allows remote attackers to determine the real path of the web server via a GET request to get_od_toc.pl with an empty Profile parameter, which leaks the pathname in an error message.
Vulnerability class: Information Disclosure
EPSS: 0.015 (72.3th percentile) — read the EPSS interpretation.
Affected products
- Webtrends Reporting_center — versions 4.0d
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (Patch, vdb-entry, Vendor Advisory, x_refsource_XF)
- cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry)
- cve@mitre.org (x_refsource_MISC)