CVE-2004-2493: Medium severity Hitachi Groupmax World Wide Web vulnerability
Published Dec 31, 2004
·Updated
Directory traversal vulnerability in Groupmax World Wide Web (GmaxWWW) 2 and 3, and Desktop 5, 6, and Desktop for Jichitai allows remote authenticated users to read arbitrary .html files via the template name parameter.
Affected Software
26 affected components
Hitachi Groupmax World Wide Web=2
Hitachi Groupmax World Wide Web=02_00
Hitachi Groupmax World Wide Web=02_20
Hitachi Groupmax World Wide Web=02_20_a
Hitachi Groupmax World Wide Web=02_31_i
Hitachi Groupmax World Wide Web=3
Hitachi Groupmax World Wide Web=03_00
Hitachi Groupmax World Wide Web=03_10_h
Hitachi Groupmax World Wide Web=03_11_b
Hitachi Groupmax World Wide Web Desktop=5
Hitachi Groupmax World Wide Web Desktop=05_00
Hitachi Groupmax World Wide Web Desktop=05_11_f
Hitachi Groupmax World Wide Web Desktop=05_11_i
Hitachi Groupmax World Wide Web Desktop=05_11_j
Hitachi Groupmax World Wide Web Desktop=6
Hitachi Groupmax World Wide Web Desktop=06_00
Hitachi Groupmax World Wide Web Desktop=06_50_b
Hitachi Groupmax World Wide Web Desktop=06_50_c
Hitachi Groupmax World Wide Web Desktop=06_51
Hitachi Groupmax World Wide Web Desktop=06_51
Hitachi Groupmax World Wide Web Desktop=06_51_b
Hitachi Groupmax World Wide Web Desktop=06_51_c
Hitachi Groupmax World Wide Web Desktop=06_52
Hitachi Groupmax World Wide Web Desktop=06_52
Hitachi Groupmax World Wide Web Desktop=06_52_b
Hitachi Groupmax World Wide Web Desktop=gold
Remediation
Event History
Dec 31, 2004
CVE Published
05:00 AM
Oct 25, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-2493?
CVE-2004-2493 is classified as a moderate severity vulnerability.
2
How do I fix CVE-2004-2493?
To fix CVE-2004-2493, update to the latest version of Hitachi Groupmax or apply available security patches.
3
Who is affected by CVE-2004-2493?
CVE-2004-2493 affects authenticated users of Hitachi Groupmax World Wide Web versions 2, 3, and Desktop versions 5 and 6.
4
What type of vulnerability is CVE-2004-2493?
CVE-2004-2493 is a directory traversal vulnerability allowing unauthorized file access.
5
Can CVE-2004-2493 be exploited remotely?
Yes, CVE-2004-2493 can be exploited remotely by authenticated users to read arbitrary .html files.