CVE-2002-2152 Missing authorization in n/a
Remote attackers can gain administrator privileges by accessing the unprotected /admin/ directory on the Czech edition of Software602 Web Server.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2002-2152?
CVE-2002-2152 is a critical missing authorization vulnerability in n/a, published on 16 Nov 2005. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The Czech edition of Software602's Web Server before 2002.0.02.0916 allows remote attackers to gain administrator privileges via direct HTTP requests to the /admin/ directory, which is not password protected.
Which versions are affected by CVE-2002-2152?
It affects 1 product.
Products include Software602 602pro Lan Suite.
How do I fix CVE-2002-2152?
No fix has been published for CVE-2002-2152 yet. Limit exposure of the affected software until one is available.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2002-2152 being exploited?
There is no known exploitation of CVE-2002-2152 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-4hvf-h7h9-62cm.