Vulnerability Description
Ikon AdManager 2.1 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for ikonBAnner_AdManager.mdb.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Dotnetindex | Ikon Admanager | <= 2.1 |
Related Weaknesses (CWE)
References
- http://secunia.com/advisories/33029Vendor Advisory
- http://securityreason.com/securityalert/4755
- https://www.exploit-db.com/exploits/7372
- http://secunia.com/advisories/33029Vendor Advisory
- http://securityreason.com/securityalert/4755
- https://www.exploit-db.com/exploits/7372
FAQ
What is CVE-2008-5596?
CVE-2008-5596 is a vulnerability with a CVSS score of 5.0 (MEDIUM). Ikon AdManager 2.1 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for ik...
How severe is CVE-2008-5596?
CVE-2008-5596 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2008-5596?
Check the references section above for vendor advisories and patch information. Affected products include: Dotnetindex Ikon Admanager.