CVE-2006-1386

high

Description

The (1) rdiff and (2) preview scripts in TWiki 4.0 and 4.0.1 ignore access control settings, which allows remote attackers to read restricted areas and access restricted content in TWiki topics.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/25444

http://www.vupen.com/english/advisories/2006/1116

http://www.securityfocus.com/bid/17268

http://twiki.org/cgi-bin/view/Codev/SecurityAlertTWiki4RdiffPreviewAccess

http://securitytracker.com/id?1015843

http://secunia.com/advisories/19410

Details

Source: Mitre, NVD

Published: 2006-03-26

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Severity: High

CVSS v3

Base Score: 7.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N