CVE-2004-0917 | BDVDB-2026-7392 Detail

Description#

The default installation of Vignette Application Portal installs the diagnostic utility without authentication requirements, which allows remote attackers to gain sensitive information, such as server and OS version, and conduct unauthorized activities via an HTTP request to /diag.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://exchange.xforce.ibmcloud.com/vulnerabilities/17530
http://www.securityfocus.com/bid/11267
http://securitytracker.com/id?1011447
http://www.atstake.com/research/advisories/2004/a092804-1.txt

Exploit#

No public exploit known

History#

Version 12004-11-19Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.