Vulnerability in Critical Path Injoin Directory Server

CVE-2002-0786

iCon administrative web server for Critical Path inJoin Directory Server 4.0 allows authenticated inJoin administrators to read arbitrary files by specifying the target file in the LOG parameter.

EPSS: 0.032 (86.8th percentile) — read the EPSS interpretation.

Affected products

References

  • cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_VULNWATCH, Patch)
  • cve@mitre.org (Patch, vdb-entry, Vendor Advisory, x_refsource_XF)
  • cve@mitre.org (Exploit, Patch, vdb-entry, x_refsource_BID, Vendor Advisory)