Back to Database
Status published
Low
CVE-2004-2684
Unspecified vulnerability in the %template package in InterSystems Cache' 5.0...
Vulnerability Description
Unspecified vulnerability in the %template package in InterSystems Cache' 5.0 allows attackers to access certain files on a server, including (1) cache.key and (2) cache.dat, related to .csp files under (a) Dev\studio\templates and (b) Devuser\studio\templates.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2004-2684
Credits & Attribution
No credits recorded in the NVD database.
References
More from intersystems
View All →CVE-2018-17152
Intersystems Cache 2017.2.2.865.0 allows XXE....
Medium
6.4
CVE-2018-17151
Intersystems Cache 2017.2.2.865.0 has Incorrect Access Control....
Medium
5.4
CVE-2018-17150
Intersystems Cache 2017.2.2.865.0 allows XSS....
Medium
6.1
CVE-2007-4427
Unspecified vulnerability in the login page redirection logic in the...
Low
3.5
CVE-2007-0437
Multiple cross-site scripting (XSS) vulnerabilities in the sample Cache' Server...
Low
3.5
Affected Vendor
intersystems
View all reports →Affected Software
cache database
Vulnerable Versions:
5
Timeline
Official Publish:
August 20th, 2007
Last Modified:
September 16th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.