CVE-2008-2432 — Sensitive Information Exposure in Iprint

CWE-200 — Sensitive Information Exposure3 documents3 sources
Severity
5.0MEDIUMNVD
EPSS
0.9%
top 24.97%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Novell Iprint
Timeline
PublishedNov 26
Latest updateMay 1

Description

Insecure method vulnerability in the GetFileList method in an unspecified ActiveX control in Novell iPrint Client before 5.06 allows remote attackers to list the image files in an arbitrary directory via a directory name in the argument.

CVSS vector

AV:N/AC:L/C:P/I:N/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

▶NVDnovell/iprint5.04+8

🔴Vulnerability Details

2
GHSA
GHSA-2hr2-h6cw-gfqc: Insecure method vulnerability in the GetFileList method in an unspecified ActiveX control in Novell iPrint Client before 5↗2022-05-01
▶
CVEList
CVE-2008-2432: Insecure method vulnerability in the GetFileList method in an unspecified ActiveX control in Novell iPrint Client before 5↗2008-11-26
▶
CVE-2008-2432 — Sensitive Information Exposure | cvebase