Unscored severity · published Jan 27, 2005
CVE-2004-0917
The default installation of Vignette Application Portal installs the diagnostic utility without authentication requirements, which allows remote attackers to gain sensitive…
–
CVSS
1.6%
EPSS
No
On KEV
Description
The default installation of Vignette Application Portal installs the diagnostic utility without authentication requirements, which allows remote attackers to gain sensitive information, such as server and OS version, and conduct unauthorized activities via an HTTP request to /diag.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.6% · higher than 76% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AP
Application Portal · Vignette
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-0917
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-0917
securitytracker.com
http://securitytracker.com/id?1011447
Exploit
http://www.atstake.com/research/advisories/2004/a092804-1.txt
Vendor Advisory
http://www.securityfocus.com/bid/11267
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/17530