CVE-2007-2638 eFileCabinet 3.3 allows remote attackers to bypass authentication and access restricted portions of the interface via an invalid filecabinetnumber, which can be leveraged to obtain sensitive informati...
HighCVSS 10.0
EPSS 2.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
eFileCabinet 3.3 allows remote attackers to bypass authentication and access restricted portions of the interface via an invalid filecabinetnumber, which can be leveraged to obtain sensitive information or create new data structures.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| efilecabinet | <= 3.3 | No fix listed |
References
- 34774 vdb-entry
- 2696 third-party-advisory
- 20070511 eFileCabinet Authentication Bypass mailing-list
- 23944 vdb-entry
- efilecabinet-cabinetnumber-security-bypass(34251) vdb-entry