PatchTheCVEbscw vulnerabilities and fixes
Recent CVEs affecting bscw, with upgrade or downgrade steps. 4 tracked.
bscw has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2014-05-12. Highest priority: CVE-2002-0095 (score 53/100).
- CVE-2014-2301 MEDIUM 5.0 UPGRADE OrbiTeam BSCW before 5.0.8 allows remote attackers to obtain sensitive metadata via the inf operations (op=inf
- CVE-2002-0095 HIGH 7.5 DOWNGRADE The default configuration of BSCW (Basic Support for Cooperative Work) 3.x and possibly version 4 enables user
- CVE-2002-0094 HIGH 7.5 DOWNGRADE config_converters.py in BSCW (Basic Support for Cooperative Work) 3.x and versions before 4.06 allows remote a
- CVE-2001-0973 MEDIUM 6.4 UPGRADE BSCW groupware system 3.3 through 4.0.2 beta allows remote attackers to read or modify arbitrary files by uplo
FAQ
How do I fix bscw vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is bscw being exploited right now?
None of the tracked bscw CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which bscw CVE should I patch first?
CVE-2002-0095 currently ranks highest (53/100): The default configuration of BSCW (Basic Support for Cooperative Work) 3.x and possibly version 4 enables user.