CVE-2002-1058

CVE-2002-1058 is a critical directory traversal vulnerability affecting Cobalt Qube 3.0, allowing local and remote attackers to gain administrative privileges. Attackers can exploit this by manipulating the sessionId cookie with dot-dot sequences to point to an alternate session file. With a CVSS score of 10.0, this vulnerability is easily exploitable over the network with low complexity and no authentication, leading to complete compromise of confidentiality, integrity, and availability. While not listed on the CISA KEV catalog, an exploit for authentication bypass exists on ExploitDB, and despite its age and severity, there is no evidence of active exploitation or significant community discussion.