CVE-2004-2079

Опубликовано: 09 фев. 2004

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Red-M Red-Alert 2.7.5 with software 3.1 build 24 binds authentication to IP addresses, which allows remote attackers to bypass authentication by connecting from the same IP address as an active authenticated user.

Ссылки

http://genhex.org/releases/031003.txt
Vendor Advisory
http://marc.info/?l=full-disclosure&m=107635119005407&w=2
http://securitytracker.com/id?1009001
Exploit
Patch
Vendor Advisory
http://www.osvdb.org/3952
http://www.securiteam.com/securitynews/5SP0C0KC0A.html
Vendor Advisory
http://www.securityfocus.com/archive/1/353211
Vendor Advisory
http://www.securityfocus.com/bid/9618
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15088
http://genhex.org/releases/031003.txt
Vendor Advisory
http://marc.info/?l=full-disclosure&m=107635119005407&w=2
http://securitytracker.com/id?1009001
Exploit
Patch
Vendor Advisory
http://www.osvdb.org/3952
http://www.securiteam.com/securitynews/5SP0C0KC0A.html
Vendor Advisory
http://www.securityfocus.com/archive/1/353211
Vendor Advisory
http://www.securityfocus.com/bid/9618
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15088

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:h:red-m:red-alert:2.7.5_v3.1_build_24:*:*:*:*:*:*:*

EPSS

Процентиль: 80%

0.02099

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-26j8-22rg-rw9p

github

больше 4 лет назад