CVE-2004-2684: Low severity intersystems caché database vulnerability

Published Dec 31, 2004

Updated

Unspecified vulnerability in the %template package in InterSystems Cache' 5.0 allows attackers to access certain files on a server, including (1) cache.key and (2) cache.dat, related to .csp files under (a) Dev\studio\templates and (b) Devuser\studio\templates.

Affected Software

1 affected component

Intersystems Cache Database=5

Event History

Dec 31, 2004

CVE Published

05:00 AM

Aug 20, 2007

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2004-2684?

CVE-2004-2684 is considered to have a high severity due to the potential unauthorized access to sensitive files.

How do I fix CVE-2004-2684?

To fix CVE-2004-2684, ensure that appropriate access controls are applied to the files and directories affected by the vulnerability.

What files are at risk due to CVE-2004-2684?

CVE-2004-2684 allows attackers to access sensitive files such as cache.key and cache.dat.

Which version of InterSystems Cache is affected by CVE-2004-2684?

CVE-2004-2684 specifically affects InterSystems Cache Database version 5.0.

Can CVE-2004-2684 lead to data breaches?

Yes, CVE-2004-2684 can lead to data breaches due to unauthorized access to sensitive files on the server.