Vulnerability Name: | CVE-2004-2214 (CCN-16638) | ||||||||
Assigned: | 2004-07-07 | ||||||||
Published: | 2004-07-07 | ||||||||
Updated: | 2017-07-11 | ||||||||
Summary: | Mbedthis AppWeb HTTP server before 1.1.3 allows remote attackers to bypass access restrictions via a URI with mixed case characters. | ||||||||
CVSS v3 Severity: | 7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
| ||||||||
CVSS v2 Severity: | 7.5 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)
| ||||||||
Vulnerability Type: | CWE-Other | ||||||||
Vulnerability Consequences: | Gain Access | ||||||||
References: | Source: MITRE Type: CNA CVE-2004-2214 Source: CCN Type: SA12011 Mbedthis AppWeb Multiple Vulnerabilities Source: SECUNIA Type: Patch, Vendor Advisory 12011 Source: CONFIRM Type: UNKNOWN http://www.mbedthis.com/products/appWeb/doc/product/newFeatures.html Source: CCN Type: Mbedthis AppWeb Web site Secure Web Servers Source: OSVDB Type: Patch 7391 Source: CCN Type: OSVDB ID: 7391 Mbedthis AppWeb Mixed Case URL Authorization Bypass Source: BID Type: Patch 10673 Source: CCN Type: BID-10673 Mbedthis Software AppWeb HTTP Server Multiple Vulnerabilities Source: XF Type: UNKNOWN mbedthis-uri-gain-access(16638) Source: XF Type: UNKNOWN mbedthis-uri-gain-access(16638) | ||||||||
Vulnerable Configuration: | Configuration 1:![]() | ||||||||
BACK |