CVE-2004-1631 Open WorkFlow Engine (OpenWFE) 1.4.x allows remote attackers to conduct port scans of remote hosts by specifying the target in an rmi:// Worklist URL, then using the response times to infer the result...
MediumCVSS 5.0
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Open WorkFlow Engine (OpenWFE) 1.4.x allows remote attackers to conduct port scans of remote hosts by specifying the target in an rmi:// Worklist URL, then using the response times to infer the results.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| openwfe work flow engine | = 1.4 | No fix listed |
| openwfe work flow engine | = 1.4.1 | No fix listed |
| openwfe work flow engine | = 1.4.2 | No fix listed |
| openwfe work flow engine | = 1.4.3 | No fix listed |
| openwfe work flow engine | = 1.4.4 | No fix listed |
| openwfe work flow engine | = 1.4.5 | No fix listed |
References
- 20041024 Two Vulnerabilities in OpenWFE Web Client mailing-list
- 12970 third-party-advisory vendor-advisory
- 11514 patch vdb-entry vendor-advisory
- openwfe-rmi-obtain-information(17852) vdb-entry