Vulnerability in Inktomi Search
CVE-2006-6658
Inktomi Search 4.1.4 allows remote attackers to obtain sensitive information via direct requests with missing parameters to (1) help/header.html, (2) thesaurus.html, and (3) topics.html, which leak the installation path in the resulting error message, a related issue to CVE-2006-5970.
EPSS: 0.012 (65.0th percentile) — read the EPSS interpretation.
Affected products
- Inktomi Inktomi_search — versions 4.1.4
- N/a — versions n/a
References
- cve@mitre.org (Exploit, vdb-entry, x_refsource_SECTRACK)