CVE-2004-2684Unspecified vulnerability in the %template package in InterSystems Cache' 5.0 allows attackers to access certain files on a server, including (1) cache.key and (2) cache.dat, related to .csp files un…
Updated under an hour ago ()
Does this affect you?
It affects intersystems cache_database. Add what you run to find out whether that includes you.
EPSS puts the chance of exploitation in the next 30 days at 0.30%, higher than 21% of scored CVEs.
Do this next
Free account, 1 product
Unspecified vulnerability in the %template package in InterSystems Cache' 5.0 allows attackers to access certain files on a server, including (1) cache.key and (2) cache.dat, related to .csp files under (a) Dev\studio\templates and (b) Devuser\studio\templates.
- CVSS
- 2.1 LOW (v2.0, NVD)AV:L/AC:L/Au:N/C:P/I:N/A:N
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- 0.30% (percentile 21)
- Assigned by
- mitre
- NVD analysis
- Modified
- Record last updated
- Sep 16, 2024
- First seen by InfoSec Signals
- Oct 12, 2026
Affected products
intersystems cache_database intersystems:cache_database | 5 | NVD |
References
- http://groups.google.com/group/intersystems-public-cache/browse_thread/thread/7af3237a57e97f14/da52318590c68c75mailing-list, x-refsource-mlist
- http://groups.google.com/group/intersystems-public-cache/browse_thread/thread/cda052864061faf7/b1c4ad61ca27c514mailing-list, x-refsource-mlist
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.