Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2006-5932

Опубликовано: 16 нояб. 2006
Источник: nvd
CVSS2: 7.5
EPSS Низкий

Описание

Kahua before 0.7, when running multiple applications under a single supervisor, grants application access on the basis of username instead of username and database name, which allows remote authenticated users to obtain unauthorized access if different databases assign the same username to different user accounts.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:kahua:kahua:0.1:*:*:*:*:*:*:*
cpe:2.3:a:kahua:kahua:0.2:*:*:*:*:*:*:*
cpe:2.3:a:kahua:kahua:0.3:*:*:*:*:*:*:*
cpe:2.3:a:kahua:kahua:0.4:*:*:*:*:*:*:*
cpe:2.3:a:kahua:kahua:0.5:*:*:*:*:*:*:*
cpe:2.3:a:kahua:kahua:0.6:*:*:*:*:*:*:*

EPSS

Процентиль: 80%
0.01414
Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

github
почти 4 года назад

Kahua before 0.7, when running multiple applications under a single supervisor, grants application access on the basis of username instead of username and database name, which allows remote authenticated users to obtain unauthorized access if different databases assign the same username to different user accounts.

EPSS

Процентиль: 80%
0.01414
Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other