CVE-2003-1173: Medium severity Centrinity Centrinity FirstClass vulnerability
Published Dec 31, 2003
·Updated
Centrinity FirstClass 7.1 allows remote attackers to access sensitive information by appending search to the end of the URL and checking all of the search option checkboxes and leaving the text field blank, which will return all files in the searched directory.
Affected Software
2 affected components
Centrinity Centrinity FirstClass=7.1
Centrinity Centrinity FirstClass=7.1
Remediation
Patch Available
Patch Available
Event History
Dec 31, 2003
CVE Published
05:00 AM
Data Sourced
via NVD·05:00 AM
RemedyDescriptionSeverityAffected Software
May 10, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2003-1173?
The severity of CVE-2003-1173 is rated as medium with a score of 5.
2
How do I fix CVE-2003-1173?
You can fix CVE-2003-1173 by applying the available patch provided by Centrinity.
3
What type of attack does CVE-2003-1173 allow?
CVE-2003-1173 allows remote attackers to access sensitive information by exploiting improperly configured URL parameters.
4
What software is affected by CVE-2003-1173?
CVE-2003-1173 affects Centrinity FirstClass version 7.1.
5
What is the impact of CVE-2003-1173 on system confidentiality?
CVE-2003-1173 compromises system confidentiality by allowing unauthorized access to files in the searched directory.