CVE-2006-1386
The (1) rdiff and (2) preview scripts in TWiki 4.0 and 4.0.1 ignore access control settings,...
The (1) rdiff and (2) preview scripts in TWiki 4.0 and 4.0.1 ignore access control settings, which allows remote attackers to read restricted areas and access restricted content in TWiki topics.
Exploit likelihood
What each source reports
NVD Score used
The (1) rdiff and (2) preview scripts in TWiki 4.0 and 4.0.1 ignore access control settings, which allows remote attackers to read restricted areas and access restricted content in TWiki topics.
- Record
CVE-2006-1386- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
The (1) rdiff and (2) preview scripts in TWiki 4.0 and 4.0.1 ignore access control settings, which allows remote attackers to read restricted areas and access restricted content in TWiki topics.
- Record
CVE-2006-1386- Updated
- 2026-11-02
EUVDEUVD-2006-1390 No score
The (1) rdiff and (2) preview scripts in TWiki 4.0 and 4.0.1 ignore access control settings, which allows remote attackers to read restricted areas and access restricted content in TWiki topics.
- Record
EUVD-2006-1390- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-pjjr-4wm8-pvqx No score
The (1) rdiff and (2) preview scripts in TWiki 4.0 and 4.0.1 ignore access control settings,...
The (1) rdiff and (2) preview scripts in TWiki 4.0 and 4.0.1 ignore access control settings, which allows remote attackers to read restricted areas and access restricted content in TWiki topics.
- Record
GHSA-pjjr-4wm8-pvqx- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-1386 is a high vulnerability (CVSS 7.5) in Twiki, published March 26, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.78%, the 78th percentile. No source names a fixed version.
References
exchange.xforce.ibmcloud.com/vulnerabilities/25444
securityfocus.com/bid/17268
secunia.com/advisories/19410
securitytracker.com/id?1015843
vupen.com/english/advisories/2006/1116
twiki.org/cgi-bin/view/Codev/SecurityAlertTWiki4RdiffPreviewAccess
nvd.nist.gov/vuln/detail/CVE-2006-1386
github.com/advisories/GHSA-pjjr-4wm8-pvqx