Unscored CVE-2002-1546 EUVD-2002-1528GHSA-489v-qc6r-c8fp

BRS WebWeaver Web Server 1.01 allows remote attackers to bypass password protections for files and directories via an HTTP request containi…

Published Mar 18, 2003 · Updated Aug 8, 2024 · Assigned by mitre

Description

BRS WebWeaver Web Server 1.01 allows remote attackers to bypass password protections for files and directories via an HTTP request containing a "/./" sequence.

References

http://www.securityoffice.net/articles/webweaver/
brs-webweaver-file-access(10467) vdb-entry
6041 vdb-entry
20021024 [SecurityOffice] BRS WebWeaver Web Server v1.01 Protected File Access Vulnerability mailing-list