CVE-2003-1282

CVE-2003-1282 describes an information disclosure vulnerability in IBM Net.Data, where remote attackers can retrieve sensitive data like path names, server names, and potentially user credentials. This is achieved by manipulating web forms to echo predefined variables such as $(DTW_CURRENT_FILENAME), $(DATABASE), $(LOGIN), and $(PASSWORD). With a CVSS score of 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N), it indicates a low-complexity attack requiring no authentication, leading to partial confidentiality impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.