CVE-2014-2301 OrbiTeam BSCW before 5.0.8 allows remote attackers to obtain sensitive metadata via the inf operations (op=inf) to an object in pub/bscw.cgi/.
MediumCVSS 5.0
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
OrbiTeam BSCW before 5.0.8 allows remote attackers to obtain sensitive metadata via the inf operations (op=inf) to an object in pub/bscw.cgi/.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bscw | <= 5.0.7 | No fix listed |
References
- www.bscw.de vendor-advisory
- 20140508 [RT-SA-2014-003] Metadata Information Disclosure in OrbiTeam BSCW mailing-list
- www.redteam-pentesting.de exploit