CVEvulnerability

CVE-2006-1386

7.5 HIGH Published 2006-03-26 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2006-03-26
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

The (1) rdiff and (2) preview scripts in TWiki 4.0 and 4.0.1 ignore access control settings, which allows remote attackers to read restricted areas and access restricted content in TWiki topics.

Affected configurations

• twiki twiki 4.0 • twiki twiki 4.0.1

References