CVE-2002-1546: Brs Webweaver

High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days.

BRS WebWeaver Web Server 1.01 allows remote attackers to bypass password protections for files and directories via an HTTP request containing a "/./" sequence.

Affected products

  • Brs Webweaver: version 1.0.1 only

Published 2003-03-31. Last modified 2026-06-16.