CVE-2007-1923

Опубликовано: 10 апр. 2007

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

(1) LedgerSMB and (2) DWS Systems SQL-Ledger implement access control lists by changing the set of URLs linked from menus, which allows remote attackers to access restricted functionality via direct requests. The LedgerSMB affected versions are before 1.3.0.

Ссылки

http://osvdb.org/38217
Broken Link
http://osvdb.org/38218
Broken Link
http://securityreason.com/securityalert/2552
Third Party Advisory
http://www.securityfocus.com/archive/1/464880/100/0/threaded
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/23352
Broken Link
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/33494
Third Party Advisory
VDB Entry
https://github.com/ledgersmb/LedgerSMB/blob/master/Changelog
Release Notes
http://osvdb.org/38217
Broken Link
http://osvdb.org/38218
Broken Link
http://securityreason.com/securityalert/2552
Third Party Advisory
http://www.securityfocus.com/archive/1/464880/100/0/threaded
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/23352
Broken Link
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/33494
Third Party Advisory
VDB Entry
https://github.com/ledgersmb/LedgerSMB/blob/master/Changelog
Release Notes

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ledgersmb:ledgersmb:*:*:*:*:*:*:*:*

Версия до 1.3.0 (исключая)

cpe:2.3:a:sql-ledger:sql-ledger:-:*:*:*:*:*:*:*

EPSS

Процентиль: 81%

0.01489

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2007-1923

ubuntu

почти 19 лет назад

CVE-2007-1923

debian

почти 19 лет назад

1) LedgerSMB and (2) DWS Systems SQL-Ledger implement access control ...

GHSA-57fp-3g62-4483

github

почти 4 года назад

EPSS

Процентиль: 81%

0.01489

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other