CVE-2006-2476

EUVD-2006-2476 · Published May 19, 2006

Bitrix Site Manager 4.1.x stores updater.log under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information.

Technologies

Bitrix Bitrix Site Manager

Weaknesses

NVD-CWE-Other

CVSS scores

v2.05.0AV:N/AC:L/Au:N/C:P/I:N/A:N

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Initial Access

T1190Exploit Public-Facing Application

References

http://securitytracker.com/id?1016121
http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0443.html
http://secunia.com/advisories/20143
http://securityreason.com/securityalert/918
http://www.osvdb.org/25624
http://www.securityfocus.com/archive/1/434367/100/0/threaded

Potentially impacted assets

See if this affects your attack surface