CVE-2002-1659: user_profile.asp in PortalApp 2.2 allows local users to gain privileges by modifying the user_id variable.

Security readout for executives and security teams

PortalApp 2.2 reportedly lets a local user raise privileges by changing a user_id value in user_profile.asp. The sources do not provide a severity score, patch details, or evidence of active exploitation, so urgency depends on whether this legacy application exists in the environment. Exposure is likely limited to environments still running PortalApp 2.2 and allowing local or authenticated users to reach user_profile.asp. Internet exposure is not established by the provided sources. Treat as a legacy-application exposure question. If PortalApp 2.2 is absent, no action is needed. If present, prioritize validation because privilege escalation can undermine user separation even without public exploitation evidence. Mitigation focus: Check whether PortalApp 2.2 is present in asset inventory.; Review vendor or archived advisory guidance for patch or upgrade direction.; Restrict PortalApp access to trusted users while exposure is assessed..

Prepared

Jun 29, 2026, 21:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.