CVE-2006-1386

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-03-26 · updated 2026-06-16

Description

The (1) rdiff and (2) preview scripts in TWiki 4.0 and 4.0.1 ignore access control settings, which allows remote attackers to read restricted areas and access restricted content in TWiki topics.

Affected products

Twiki: 4.0, 4.0.1

References

http://secunia.com/advisories/19410
http://securitytracker.com/id?1015843
http://twiki.org/cgi-bin/view/Codev/SecurityAlertTWiki4RdiffPreviewAccess
http://www.securityfocus.com/bid/17268
http://www.vupen.com/english/advisories/2006/1116
https://exchange.xforce.ibmcloud.com/vulnerabilities/25444
http://secunia.com/advisories/19410
http://securitytracker.com/id?1015843
http://twiki.org/cgi-bin/view/Codev/SecurityAlertTWiki4RdiffPreviewAccess
http://www.securityfocus.com/bid/17268
http://www.vupen.com/english/advisories/2006/1116
https://exchange.xforce.ibmcloud.com/vulnerabilities/25444

Get alerted when CVE-2006-1386 or the next vulnerability affects your stack