high7.5Public exploit code
CVE-2002-2145
Savant Web Server 3.1 and earlier allows remote attackers to bypass authentication for password protected user folders via a URL with a hex encoded space (%20)…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Savant Web Server 3.1 - File Disclosure2002-09-13 · remote · windows · Verified
Impact
Savant Web Server 3.1 and earlier allows remote attackers to bypass authentication for password protected user folders via a URL with a hex encoded space (%20) and a '.' (%2e) at the end of the filename.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Savant | Savant Webserver | through 3.1 |