Bannermatic 1, 2, and 3 stores the (1) ban.log, (2) ban... · CVE-2002-2342 · GitHub Advisory Database · GitHub

Bannermatic 1, 2, and 3 stores the (1) ban.log, (2) ban...

Moderate severity Unreviewed Published Apr 30, 2022 to the GitHub Advisory Database • Updated Jan 30, 2023

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

Bannermatic 1, 2, and 3 stores the (1) ban.log, (2) ban.bak, (3) ban.dat and (4) banmat.pwd data files under the web document root with insufficient access control, which allows attackers to obtain sensitive information via a direct request for the files.

References

Published by the National Vulnerability Database

Dec 31, 2002

Published to the GitHub Advisory Database Apr 30, 2022

Last updated Jan 30, 2023