File Access Vulnerability in InterSystems Cache' 5.0

CVE-2004-2684

What is CVE-2004-2684?

An undisclosed vulnerability exists within the %template package of InterSystems Cache' 5.0, enabling unauthorized access to critical files on the server. Attackers could exploit this flaw to access sensitive information stored in files such as cache.key and cache.dat, particularly affecting .csp files located in directories like Dev\studio\templates and Devuser\studio\templates. Organizations using this version of Cache' should prioritize reviewing their security measures to mitigate potential exposure.

References