Vulnerabilities > CVE-2005-3414 - Information Disclosure vulnerability in Eyeos Project Eyeos 0.8.4

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
eyeos-project

Summary

eyeOS 0.8.4 stores usrinfo.xml under the web document root with insufficient access control, which allows remote attackers to obtain user credentials.

Vulnerable Configurations

Part Description Count
OS
Eyeos_Project
1