Vulnerability Details : CVE-2005-0316
Potential exploit
WebWasher Classic 2.2.1 and 3.3, when running in server mode, does not properly drop CONNECT requests to the localhost from external systems, which could allow remote attackers to bypass intended access restrictions.
Products affected by CVE-2005-0316
- cpe:2.3:a:webwasher:webwasher_classic:2.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:webwasher:webwasher_classic:3.3:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2005-0316
10.76%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 93 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2005-0316
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
7.5
|
HIGH | AV:N/AC:L/Au:N/C:P/I:P/A:P |
10.0
|
6.4
|
NIST |
References for CVE-2005-0316
Jump to