CVE-2002-2145
Savant Web Server 3.1 and earlier allows remote attackers to bypass authentication for password...
Savant Web Server 3.1 and earlier allows remote attackers to bypass authentication for password protected user folders via a URL with a hex encoded space (%20) and a '.' (%2e) at the end of the filename.
Exploit likelihood
What each source reports
NVD Score used
Savant Web Server 3.1 and earlier allows remote attackers to bypass authentication for password protected user folders via a URL with a hex encoded space (%20) and a '.' (%2e) at the end of the filename.
- Record
CVE-2002-2145- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Savant Web Server 3.1 and earlier allows remote attackers to bypass authentication for password protected user folders via a URL with a hex encoded space (%20) and a '.' (%2e) at the end of the filename.
- Record
CVE-2002-2145- Updated
- 2026-11-02
EUVDEUVD-2002-2124 No score
Savant Web Server 3.1 and earlier allows remote attackers to bypass authentication for password protected user folders via a URL with a hex encoded space (%20) and a '.' (%2e) at the end of the filename.
- Record
EUVD-2002-2124- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2rvm-9jxc-7f5f No score
Savant Web Server 3.1 and earlier allows remote attackers to bypass authentication for password...
Savant Web Server 3.1 and earlier allows remote attackers to bypass authentication for password protected user folders via a URL with a hex encoded space (%20) and a '.' (%2e) at the end of the filename.
- Record
GHSA-2rvm-9jxc-7f5f- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Savant Web Server 3.1 - File Disclosure | 2002-09-13 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2002-2145 is a high vulnerability (CVSS 7.5) in Savant Webserver, published December 31, 2002. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 7.65%, the 94th percentile. No source names a fixed version.