CVE-2006-0704

BAJO 2.6CVE-2006-0704 · Published 15/02/2006 · updated 16/06/2026

En resumen

CVE-2006-0704 es una vulnerabilidad BAJO (CVSS 2.6) que afecta a ie integrator (ie).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.2%, mayor que el 68.8% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
ie integrator ie	`= 4.4.220114`	No fix yet

Description

iE Integrator 4.4.220114, when configured without a "bespoke error page" in acm.ini, allows remote attackers to obtain sensitive information via a URL that calls a non-existent .aspx script in the integrator/apps directory, which results in an error message that displays the installation path, web server name, IP, and port, session cookie information, and the IIS system username.

References

secunia.com/advisories/18813 · Vendor Advisory
irmplc.com/advisory016.htm · Vendor Advisory
vupen.com/english/advisories/2006/0568
exchange.xforce.ibmcloud.com/vulnerabilities/24714

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free