Vulnerabilities > CVE-2002-0582 - Unspecified vulnerability in Workforceroi Xpede 4.1

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
low complexity
workforceroi

Summary

WorkforceROI Xpede 4.1 stores temporary expense claim reports in a world-readable and indexable /reports/temp directory, which allows remote attackers to read the reports by accessing the directory.

Vulnerable Configurations

Part Description Count
Application
Workforceroi
1