Vulnerability Name: | CCN-20692 | ||||||
Published: | 2005-05-18 | ||||||
Updated: | 2005-05-18 | ||||||
Summary: | Microsoft ASP.NET Framework could allow a remote attacker to obtain sensitive information. A remote attacker can send a specially-crafted URL request to cause the full installation path of Microsoft ASP.NET to be disclosed. | ||||||
CVSS v3 Severity: | 5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
| ||||||
CVSS v2 Severity: | 5.0 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N)
| ||||||
Vulnerability Consequences: | Obtain Information | ||||||
References: | Source: CCN Type: Net Square Security Advisory NS-051805-ASPNET Unhandled exception leads to file system disclosure and SQL injection Source: XF Type: UNKNOWN ms-aspnet-path-disclosure(20692) | ||||||
Vulnerable Configuration: | Configuration CCN 1: Denotes that component is vulnerable | ||||||
BACK |