Vulnerability Details CVE-2002-1530
The administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows users to obtain usernames and plaintext passwords via a request to the userlist.asp program, which includes the passwords in a user editing form.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.071
EPSS Ranking 91.1%
CVSS Severity
CVSS v2 Score 5.0
References
- http://archives.neohapsis.com/archives/bugtraq/2002-10/0137.html
- http://www.iss.net/security_center/static/10320.php
- http://www.securityfocus.com/bid/5929
- http://archives.neohapsis.com/archives/bugtraq/2002-10/0137.html
- http://www.iss.net/security_center/static/10320.php
- http://www.securityfocus.com/bid/5929
Products affected by CVE-2002-1530
-
cpe:2.3:a:surfcontrol:superscout_email_filter:3.5
-
cpe:2.3:a:surfcontrol:superscout_email_filter:3.5.1
-
cpe:2.3:a:surfcontrol:superscout_email_filter:4.0