Vulnerabilities > CVE-2007-2638 - Authentication Bypass vulnerability in EFileCabinet FileCabinetNumber

047910
CVSS 10.0 - CRITICAL
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
network
low complexity
efilecabinet
critical

Summary

eFileCabinet 3.3 allows remote attackers to bypass authentication and access restricted portions of the interface via an invalid filecabinetnumber, which can be leveraged to obtain sensitive information or create new data structures.

Vulnerable Configurations

Part Description Count
Application
Efilecabinet
1