Unscored CVE-2002-0705 EUVD-2002-0697GHSA-87hm-p8w7-cm44

The Web Reports Server for SurfControl SuperScout WebFilter stores the "scwebusers" username and password file in a web-accessible director…

Published Oct 3, 2002 · Updated Aug 8, 2024 · Assigned by mitre

Description

The Web Reports Server for SurfControl SuperScout WebFilter stores the "scwebusers" username and password file in a web-accessible directory, which allows remote attackers to obtain valid usernames and crack the passwords.

References

20021002 wp--02-0005: Multiple Vulnerabilities in SuperScout Web Reports Server mailing-list
3489 vdb-entry
http://www.westpoint.ltd.uk/advisories/wp-02-0005.txt
superscout-webfilter-information-retrieval(10248) vdb-entry
5856 vdb-entry