« Volver al listado

CVE-2001-0870

Estado: ModificadaMedia (5)—

HTTP server in Alchemy Eye and Alchemy Network Monitor 1.9x through 2.6.18 is enabled without authentication by default, which allows remote attackers to obtain network monitoring logs with potentially sensitive information by directly requesting the eye.ini file.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Alchemy LAB — Alchemy EYEDEK Software — Alchemy Network Monitor

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2001-0870",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2001-12-21T05:00:00.000",
  "references": [
    {
      "url": "http://marc.info/?l=bugtraq&m=100715758109838&w=2",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/3598",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/7630",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://marc.info/?l=bugtraq&m=100715758109838&w=2",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/3598",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/7630",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "HTTP server in Alchemy Eye and Alchemy Network Monitor 1.9x through 2.6.18 is enabled without authentication by default, which allows remote attackers to obtain network monitoring logs with potentially sensitive information by directly requesting the eye.ini file."
    },
    {
      "lang": "es",
      "value": "Servidor HTTP en Alchemy Eye y Alchemy Network Monitor 1.9x a 2.6.18 está activado sin autenticación por defecto, lo que permite a atacantes remotos obtener registros de monitorización de red con información potencialmente sensible pidiendo directamente el fichero eye.ini."
    }
  ],
  "lastModified": "2026-06-16T21:55:08.343",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:alchemy_lab:alchemy_eye:1.9:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A0BBDA03-3C32-4423-8B70-7118A43D0A05"
            },
            {
              "criteria": "cpe:2.3:a:alchemy_lab:alchemy_eye:2.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C57D4BEB-8A2B-434D-9259-F0D74680583F"
            },
            {
              "criteria": "cpe:2.3:a:alchemy_lab:alchemy_eye:2.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "125F5340-4E2E-4398-92D4-D1596556EC71"
            },
            {
              "criteria": "cpe:2.3:a:alchemy_lab:alchemy_eye:2.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3CC27884-242B-408E-BF52-4BAA7230648F"
            },
            {
              "criteria": "cpe:2.3:a:alchemy_lab:alchemy_eye:2.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B35A9CDC-2B00-4463-B003-5DC83D8F741A"
            },
            {
              "criteria": "cpe:2.3:a:alchemy_lab:alchemy_eye:2.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B0E5C679-06B1-4FEA-BCFE-384A098A673A"
            },
            {
              "criteria": "cpe:2.3:a:alchemy_lab:alchemy_eye:2.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DE5C405F-F6EE-4893-BC33-6541D1968928"
            },
            {
              "criteria": "cpe:2.3:a:alchemy_lab:alchemy_eye:2.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "672B793F-E68D-48E7-89F8-D7CD7B6A3853"
            },
            {
              "criteria": "cpe:2.3:a:alchemy_lab:alchemy_eye:2.6.18:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4B816AAB-8EA9-4404-9782-401D5D49F74C"
            },
            {
              "criteria": "cpe:2.3:a:dek_software:alchemy_network_monitor:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CC7C48D0-86F3-4B71-A23F-1814962C0C9C",
              "versionEndIncluding": "2.6.18"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}