CVEvulnerability

CVE-2000-0191

10.0 HIGH Published 2000-02-29 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2000-02-29
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

Axis StorPoint CD allows remote attackers to access administrator URLs without authentication via a .. (dot dot) attack.

Affected configurations

• axis storpoint cd

Related

Referenced by CWE · observed example (4)

  • CWE-179 Incorrect Behavior Order: Early Validation weakness
  • CWE-180 Incorrect Behavior Order: Validate Before Canonicalize weakness
  • CWE-41 Improper Resolution of Path Equivalence weakness
  • CWE-57 Path Equivalence: 'fakedir/../realdir/filename' weakness

References