← Database

CVE-2002-2158

MEDIUM CVSS: 5.0 Published: 2002-12-31 Modified: 2026-06-16

Description

zenTrack 2.0.3 and earlier allows remote attackers to obtain the full path to the web root via an invalid ticket ID, which leaks the path in an error message.

Affected Platforms

Zendocs Zentrack

Weakness Type

NVD-CWE-Other

References