vendor:
Methodus 3 Web Server
by:
SecurityFocus
7.5
CVSS
HIGH
File Disclosure
22
CWE
Product Name: Methodus 3 Web Server
Affected Version From: Methodus 3 Web Server
Affected Version To: Methodus 3 Web Server
Patch Exists: YES
Related CWE: CVE-2002-0991
CPE: a:methodus:methodus_3_web_server
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: None
2002
The Methodus 3 Web Server component is prone to a file disclosure vulnerability
The Methodus 3 Web Server component is prone to a file disclosure vulnerability. It is possible for remote attackers to retrieve resources outside of the web root directory via directory traversal attacks. This could potentially be exploited to gain access to sensitive files on a system hosting the vulnerable software.
Mitigation:
Upgrade to the latest version of Methodus 3 Web Server