NetSight
IP …
medium4.3

CVE-2007-3008

Mbedthis AppWeb before 2.2.2 enables the HTTP TRACE method, which has unspecified impact probably related to remote information leaks and cross-site tracing (X…

Impact

Mbedthis AppWeb before 2.2.2 enables the HTTP TRACE method, which has unspecified impact probably related to remote information leaks and cross-site tracing (XST) attacks, a related issue to CVE-2004-2320 and CVE-2005-3398.

Affected products

VendorProductAffected versions
Mbedthis SoftwareMbedthis Appweb Http Server
Versions 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5

Weakness classification

CWE-79CWE-200

References