CVE-2002-1058: Critical severity Cobalt Qube vulnerability
Directory traversal vulnerability in splashAdmin.php for Cobalt Qube 3.0 allows local users and remote attackers, to gain privileges as the Qube Admin via .. (dot dot) sequences in the sessionId cookie that point to an alternate session file.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2002-1058?
CVE-2002-1058 is categorized as a high-severity vulnerability due to its potential to allow unauthorized access to system privileges.
How do I fix CVE-2002-1058?
To fix CVE-2002-1058, ensure that the affected Cobalt Qube 3.0 software is updated to a patched version or apply configuration changes to mitigate directory traversal.
Who is affected by CVE-2002-1058?
CVE-2002-1058 affects users and administrators of Cobalt Qube version 3.0, allowing both local and remote attackers to exploit the vulnerability.
What type of vulnerability is CVE-2002-1058?
CVE-2002-1058 is a directory traversal vulnerability that allows the manipulation of session ID cookies to gain unauthorized access.
Can CVE-2002-1058 be exploited remotely?
Yes, CVE-2002-1058 can be exploited remotely by attackers using crafted requests to compromise Qube Admin privileges.