What is CVE-2002-2024?

CVE-2002-2024 is a medium-severity vulnerability in Horde Imp, classified under CWE-219. CVSS score: 5.3/10. Published 2002-12-31.

How severe is CVE-2002-2024?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Vulnerability in Horde Imp

CVE-2002-2024

Horde IMP 2.2.7 allows remote attackers to obtain the full web root pathname via an HTTP request for (1) poppassd.php3, (2) login.php3?reason=chpass2, (3) spelling.php3, and (4) ldap.search.php3?ldap_serv=nonsense which leaks the informati…

EPSS: 0.019 (77.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.

Affected products

Horde Imp — versions 2.2.7
N/a — versions n/a

Weakness classification (CWE)

CWE-219

References

cve@mitre.org (x_refsource_MISC)
cve@mitre.org (vdb-entry, x_refsource_BID)
cve@mitre.org (vdb-entry, x_refsource_XF)

Frequently asked questions

What is CVE-2002-2024?: CVE-2002-2024 is a medium-severity vulnerability in Horde Imp, classified under CWE-219. CVSS score: 5.3/10. Published 2002-12-31.
How severe is CVE-2002-2024?: Medium severity. CVSS v3 base score is 5.3 out of 10.