medium5.0
CVE-2001-1073
Webridge PX Application Suite allows remote attackers to obtain sensitive information via a malformed request that generates a server error message, which incl…
Impact
Webridge PX Application Suite allows remote attackers to obtain sensitive information via a malformed request that generates a server error message, which includes full pathname or internal IP address information in the variables (1) APPL_PHYSICAL_PATH, (2) PATH_TRANSLATED, and (3) LOCAL_ADDR.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Webridge | Px Application Suite | All versions |
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/archive/1/204725
- http://www.securityfocus.com/bid/3182
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6993
- http://www.securityfocus.com/archive/1/204725
- http://www.securityfocus.com/bid/3182
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6993