CVEvulnerability
CVE-2004-2748
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2004-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
viewreport.pl in NetIQ WebTrends Reporting Center Enterprise Edition 6.1a allows remote attackers to determine the installation path via an invalid profileid parameter, which leaks the pathname in an error message.
Affected configurations
• webtrends reporting center 6.1a
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://secunia.com/advisories/10689 Vendor Advisory
- http://securityreason.com/securityalert/3354 securityreason.com
- http://www.osvdb.org/3680 www.osvdb.org
- http://www.securityfocus.com/archive/1/350419/30/21610/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/9460 www.securityfocus.com
- http://www.securitytracker.com/id?1008799 www.securitytracker.com
- http://secunia.com/advisories/10689 Vendor Advisory
- http://securityreason.com/securityalert/3354 securityreason.com
- http://www.osvdb.org/3680 www.osvdb.org
- http://www.securityfocus.com/archive/1/350419/30/21610/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/9460 www.securityfocus.com
- http://www.securitytracker.com/id?1008799 www.securitytracker.com