Unscored severity · published Dec 31, 2004
CVE-2004-2493
Directory traversal vulnerability in Groupmax World Wide Web (GmaxWWW) 2 and 3, and Desktop 5, 6, and Desktop for Jichitai allows remote authenticated users to read arbitrary…
–
CVSS
1.3%
EPSS
No
On KEV
Description
Directory traversal vulnerability in Groupmax World Wide Web (GmaxWWW) 2 and 3, and Desktop 5, 6, and Desktop for Jichitai allows remote authenticated users to read arbitrary .html files via the template name parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 71% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GW
Groupmax World Wide Web · Hitachi
2; 02_00; 02_20; 02_20_a; 02_31_i; 3; +3 more · source: NVD
GW
Groupmax World Wide Web Desktop · Hitachi
5; 05_00; 05_11_f; 05_11_i; 05_11_j; 6; +11 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-2493
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-2493
secunia.com
http://secunia.com/advisories/13321
Patch
http://www.hitachi-support.com/security_e/vuls_e/HS04-007_e/01-e.html
www.osvdb.org
http://www.osvdb.org/12153
www.securityfocus.com
http://www.securityfocus.com/bid/11773
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/18278
More from Groupmax World Wide Web
–
CVE-2006-2087
The Gmax Mail client in Hitachi Groupmax before 20060426 allows remote attackers to cause a denial of service (application hang or erroneous behavior) via an attachment with an…
–
CVE-2006-1574
Cross-site scripting (XSS) vulnerability in Groupmax World Wide Web, World Wide Web Desktop, World Wide Web for Scheduler, and Desktop for Scheduler, allows remote attackers to…