Vulnerability Description
The radware AppWall Web Application Firewall (WAF) 1.0.2.6, with Gateway 4.6.0.2, allows remote attackers to read source code via a direct request to (1) funcs.inc, (2) defines.inc, or (3) msg.inc in Management/.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Radware | Appwall | 1.0.2.6 |
| Radware | Gateway | 4.6.0.2 |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/archive/1/504682/100/0/threaded
- http://www.securityfocus.com/archive/1/504682/100/0/threaded
FAQ
What is CVE-2009-2301?
CVE-2009-2301 is a vulnerability with a CVSS score of 7.8 (HIGH). The radware AppWall Web Application Firewall (WAF) 1.0.2.6, with Gateway 4.6.0.2, allows remote attackers to read source code via a direct request to (1) funcs.inc, (2) defines.inc, or (3) msg.inc in ...
How severe is CVE-2009-2301?
CVE-2009-2301 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2009-2301?
Check the references section above for vendor advisories and patch information. Affected products include: Radware Appwall, Radware Gateway.