{"id":"CVE-2006-1386","state":"PUBLISHED","title":"The (1) rdiff and (2) preview scripts in TWiki 4.0 and 4.0.1 ignore access control settings, which allows remote attackers to read restricted areas and access restricted content in","description":"The (1) rdiff and (2) preview scripts in TWiki 4.0 and 4.0.1 ignore access control settings, which allows remote attackers to read restricted areas and access restricted content in TWiki topics.","publishedAt":"2006-03-26T22:00:00.000Z","updatedAt":"2024-08-07T17:12:21.294Z","severity":null,"assigner":"mitre","products":["n/a n/a"],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":["https://exchange.xforce.ibmcloud.com/vulnerabilities/25444","http://www.securityfocus.com/bid/17268","http://secunia.com/advisories/19410","http://securitytracker.com/id?1015843","http://www.vupen.com/english/advisories/2006/1116","http://twiki.org/cgi-bin/view/Codev/SecurityAlertTWiki4RdiffPreviewAccess"],"weaknesses":[],"ingestedAt":"2026-10-29T19:27:38.022Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2006/1xxx/CVE-2006-1386.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2006-1386","state":"PUBLISHED","datePublished":"2006-03-26T22:00:00.000Z","dateUpdated":"2024-08-07T17:12:21.294Z","assignerShortName":"mitre","assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","dateReserved":"2006-03-24T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"The (1) rdiff and (2) preview scripts in TWiki 4.0 and 4.0.1 ignore access control settings, which allows remote attackers to read restricted areas and access restricted content in TWiki topics."}],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/25444","name":"twiki-restricted-content-access(25444)","tags":["vdb-entry","x_refsource_XF"]},{"url":"http://www.securityfocus.com/bid/17268","name":"17268","tags":["vdb-entry","x_refsource_BID"]},{"url":"http://secunia.com/advisories/19410","name":"19410","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://securitytracker.com/id?1015843","name":"1015843","tags":["vdb-entry","x_refsource_SECTRACK"]},{"url":"http://www.vupen.com/english/advisories/2006/1116","name":"ADV-2006-1116","tags":["vdb-entry","x_refsource_VUPEN"]},{"url":"http://twiki.org/cgi-bin/view/Codev/SecurityAlertTWiki4RdiffPreviewAccess","tags":["x_refsource_CONFIRM"]}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"mitre","dateUpdated":"2017-07-19T15:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca"},"datePublic":"2006-03-25T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2006-1386","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"The (1) rdiff and (2) preview scripts in TWiki 4.0 and 4.0.1 ignore access control settings, which allows remote attackers to read restricted areas and access restricted content in TWiki topics."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"twiki-restricted-content-access(25444)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/25444"},{"name":"17268","refsource":"BID","url":"http://www.securityfocus.com/bid/17268"},{"name":"19410","refsource":"SECUNIA","url":"http://secunia.com/advisories/19410"},{"name":"1015843","refsource":"SECTRACK","url":"http://securitytracker.com/id?1015843"},{"name":"ADV-2006-1116","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2006/1116"},{"name":"http://twiki.org/cgi-bin/view/Codev/SecurityAlertTWiki4RdiffPreviewAccess","refsource":"CONFIRM","url":"http://twiki.org/cgi-bin/view/Codev/SecurityAlertTWiki4RdiffPreviewAccess"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/25444","name":"twiki-restricted-content-access(25444)","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.securityfocus.com/bid/17268","name":"17268","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://secunia.com/advisories/19410","name":"19410","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://securitytracker.com/id?1015843","name":"1015843","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2006/1116","name":"ADV-2006-1116","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"http://twiki.org/cgi-bin/view/Codev/SecurityAlertTWiki4RdiffPreviewAccess","tags":["x_refsource_CONFIRM","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-07T17:12:21.294Z"}}]}}}