CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 10.0. It affects Microsoft, Windows. Its EPSS score suggests a 71.9% probability of exploitation in the next 30 days. It may be remotely exploitable.
CVE
CVE-2007-2815
Severity
HIGH
CVSS
10
EPSS
71.91%
Microsoft Windows
Original NVD Description
The "hit-highlighting" functionality in webhits.dll in Microsoft Internet Information Services (IIS) Web Server 5.0 only uses Windows NT ACL configuration, which allows remote attackers to bypass NTLM and basic authentication mechanisms and access private web directories via the CiWebhitsfile parameter to null.htw.