CVE-2006-1386 | BDVDB-2026-15867 Detail

Description#

The (1) rdiff and (2) preview scripts in TWiki 4.0 and 4.0.1 ignore access control settings, which allows remote attackers to read restricted areas and access restricted content in TWiki topics.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://exchange.xforce.ibmcloud.com/vulnerabilities/25444
http://www.securityfocus.com/bid/17268
http://secunia.com/advisories/19410
http://securitytracker.com/id?1015843
http://www.vupen.com/english/advisories/2006/1116
http://twiki.org/cgi-bin/view/Codev/SecurityAlertTWiki4RdiffPreviewAccess

Exploit#

No public exploit known

History#

Version 12006-03-26Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.