Detections
Analytics
eZ Publish site.ini Configuration Disclosure
medium Nessus Network Monitor Plugin ID 1562
Synopsis
eZ Publish (a content management system) is installed on the remote host.Description
eZ Publish (a content management system) is installed on the remote host. An attacker may retrieve the file 'settings/site.ini' and gather interesting information about the remote host.Solution
Restrict remote access to .ini files.See Also
http://archives.neohapsis.com/archives/bugtraq/2003-04/0206.html
Plugin Details
Severity: Medium
ID: 1562
Family: CGI
Published: 8/18/2004
Updated: 3/6/2019
Nessus ID: 11538
Risk Information
CVSS v2
Risk Factor: Medium
Base Score: 5
Temporal Score: 5
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N
CVSS v3
Risk Factor: Medium
Base Score: 5.3
Temporal Score: 5.3
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Temporal Vector: CVSS:3.0/E:H/RL:U/RC:X