Unscored CVE-2002-2158 EUVD-2002-2137GHSA-5qv2-c495-gxm4

zenTrack 2.0.3 and earlier allows remote attackers to obtain the full path to the web root via an invalid ticket ID, which leaks the path i…

Published Nov 16, 2005 · Updated Sep 16, 2024 · Assigned by mitre

Description

zenTrack 2.0.3 and earlier allows remote attackers to obtain the full path to the web root via an invalid ticket ID, which leaks the path in an error message.

References

4973 vdb-entry
zentrack-ticketid-path-disclosure(9312) vdb-entry
20020610 [ARL02-A14] ZenTrack System Information Path Disclosure Vulnerability mailing-list