Vulnerability Database

308,379

Total vulnerabilities in the database

CVE-2002-2158

zenTrack 2.0.3 and earlier allows remote attackers to obtain the full path to the web root via an invalid ticket ID, which leaks the path in an error message.

Published: Dec 31, 2002
Updated: Nov 9, 2025
CVE: CVE-2002-2158
Severity: Medium
Exploit:

CVSS v2:

Severity: Medium
Score: 5
AV:N/AC:L/Au:N/C:P/I:N/A:N

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
zendocs / zentrack	2.0.2c_beta	2.0.2c_beta.x
zendocs / zentrack	2.0.3	2.0.3.x
zendocs / zentrack	2.0.1c_beta	2.0.1c_beta.x

http://online.securityfocus.com/archive/1/276121
http://www.iss.net/security_center/static/9312.php
http://www.securityfocus.com/bid/4973

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo