CVE-2007-3964 Itaka before 0.2.1, when using Authentication mode, allows remote attackers to bypass authentication and obtain sensitive information by downloading screenshots via a direct request for /screenshot.
MediumCVSS 5.0
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Itaka before 0.2.1, when using Authentication mode, allows remote attackers to bypass authentication and obtain sensitive information by downloading screenshots via a direct request for /screenshot.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| itaka | <= 0.2.1 | No fix listed |
References
- 38278 vdb-entry
- 26146 patch third-party-advisory vendor-advisory
- www.jardinpresente.com.ar patch
- 24985 exploit patch vdb-entry