CVE-2004-2748

Published: Dec 31, 2004Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

viewreport.pl in NetIQ WebTrends Reporting Center Enterprise Edition 6.1a allows remote attackers to determine the installation path via an invalid profileid parameter, which leaks the pathname in an error message.

Affected (1)

Products: Webtrends: Reporting Center

Webtrends

1 product

Reporting Center

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Webtrends Reporting Center	Version 6.1a

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (12)

http://secunia.com/advisories/10689

Source: cve@mitre.org

Vendor Advisory

http://securityreason.com/securityalert/3354

Source: cve@mitre.org

http://www.osvdb.org/3680

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/350419/30/21610/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/9460

Source: cve@mitre.org

http://www.securitytracker.com/id?1008799

Source: cve@mitre.org

http://secunia.com/advisories/10689