CVE-2006-1386

Published: Mar 26, 2006Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

The (1) rdiff and (2) preview scripts in TWiki 4.0 and 4.0.1 ignore access control settings, which allows remote attackers to read restricted areas and access restricted content in TWiki topics.

Affected (2)

Products: Twiki: Twiki

Twiki

1 product

Twiki

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Twiki Twiki	Version 4.0.1
Twiki Twiki	Version 4.0

References (12)

http://secunia.com/advisories/19410

Source: cve@mitre.org

http://securitytracker.com/id?1015843

Source: cve@mitre.org

http://twiki.org/cgi-bin/view/Codev/SecurityAlertTWiki4RdiffPreviewAccess

Source: cve@mitre.org

http://www.securityfocus.com/bid/17268

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/1116

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/25444

Source: cve@mitre.org

http://secunia.com/advisories/19410