CVE-2009-0700

Plunet BusinessManager 4.1 and earlier allows remote authenticated users to bypass access restrictions and (1) read sensitive Customer or Order data via a…

published February 23, 2009

CVSS
—
EPSS
3%
Percentile
84.6
In the wild
Unconfirmed
What it is

Plunet BusinessManager 4.1 and earlier allows remote authenticated users to bypass access restrictions and (1) read sensitive Customer or Order data via a modified Pfad parameter to pagesUTF8/Sys_DirAnzeige.jsp, or (2) list sensitive Jobs via a direct request to pagesUTF8/auftrag_job.jsp.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02511 · 84.6th percentile
Published
2009-02-23T15:00Z
EPSS history
Timeline
  • 23 FEB 15:00Z
    Plunet BusinessManager 4.1 and earlier allows remote authenticated users to bypass access restrictions and (1) read sensitive Customer or Order data via a…
    cvelistv5