VULNERABILITY INTELLIGENCE

CVE-2001-0870

CVSS score5 MEDIUM
EPSS probability2.41%
CISA KEVNot currently listed
Published2001-12-21
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:N/A:N

Description

HTTP server in Alchemy Eye and Alchemy Network Monitor 1.9x through 2.6.18 is enabled without authentication by default, which allows remote attackers to obtain network monitoring logs with potentially sensitive information by directly requesting the eye.ini file.

Primary references