CVE-2002-1058 Directory traversal vulnerability in splashAdmin.php for Cobalt Qube 3.0 allows local users and remote attackers, to gain privileges as the Qube Admin via .. (dot dot) sequences in the sessionId cooki...
HighCVSS 10.0
EPSS 4.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in splashAdmin.php for Cobalt Qube 3.0 allows local users and remote attackers, to gain privileges as the Qube Admin via .. (dot dot) sequences in the sessionId cookie that point to an alternate session file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cobalt qube | = 3.0 | No fix listed |
References
- 20020723 Cobalt Qube 3 Administration page mailing-list
- cobalt-qube-admin-access(9669) patch vdb-entry vendor-advisory
- 5297 exploit patch vdb-entry vendor-advisory