CVE-2004-2214

Critical

Description

Mbedthis AppWeb HTTP server before 1.1.3 allows remote attackers to bypass access restrictions via a URI with mixed case characters.

SeverityCritical
CVSS9.8
Exploit probability—
ProductMbedthis Appweb Http Server
PublishedDec 31, 2004
First seenDec 31, 2004

How to fix

Update
  • mbedthis appweb_http_server1.1.3 or later

Affected products

ProductAffected versionsFixed in
mbedthis appweb_http_serverv < 1.1.31.1.3

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2004-2214 · Mbedthis Appweb Http Server · Dark Radar