CVE Catalog

CVE-1999-1250

Medium
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
1.31%

67th percentile - higher than 67% of all known CVEs

Summary

Vulnerability in CGI program in the Lasso application by Blue World, as used on WebSTAR and other servers, allows remote attackers to read arbitrary files.

Risk Assessment

Attackers can gain access to sensitive data, potentially leading to serious security breaches for the organization.

Recommendation

It is recommended to update the Lasso application to the latest version and restrict access to CGI programs.

Original NVD description (English source)

Vulnerability in CGI program in the Lasso application by Blue World, as used on WebSTAR and other servers, allows remote attackers to read arbitrary files.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS