CVE-2006-0174: Medium severity Hummingbird Collaboration vulnerability
Hummingbird Collaboration (aka Hummingbird Enterprise Collaboration) 5.21 and earlier allows remote attackers to obtain sensitive information (intranet IP addresses and enumerations of valid parameter values) via a direct request to hc, which reveals the information in an error message or a cookie.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-0174?
CVE-2006-0174 is considered a medium severity vulnerability due to its potential for information disclosure.
How do I fix CVE-2006-0174?
To fix CVE-2006-0174, upgrade to Hummingbird Collaboration version 5.22 or later, which addresses this vulnerability.
What type of information can be exposed by CVE-2006-0174?
CVE-2006-0174 can expose sensitive information such as intranet IP addresses and valid parameter value enumerations.
Which versions are affected by CVE-2006-0174?
CVE-2006-0174 affects Hummingbird Collaboration versions 5.21 and earlier, including Hummingbird Enterprise Collaboration 5.21 and earlier.
Who is impacted by CVE-2006-0174?
Organizations using vulnerable versions of Hummingbird Collaboration or Hummingbird Enterprise Collaboration are impacted by CVE-2006-0174.