Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2008-6109

Опубликовано: 11 фев. 2009
Источник: nvd
CVSS2: 4.6
EPSS Низкий

Описание

Robin Rawson-Tetley Animal Shelter Manager (ASM) before 2.2.2 does not properly enforce the privileges of user accounts, which allows local users to bypass intended access restrictions by (1) opening unspecified screens, related to the "double click selector bug"; or modifying a (2) animal, (3) owner, (4) lost/found, (5) diary note, (6) owner donation, or (7) waiting list record, related to "change permissions" and the "new UI."

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:shelter_manager:animal_shelter_manager:*:*:*:*:*:*:*:*
Версия до 2.2.1 (включая)
cpe:2.3:a:shelter_manager:animal_shelter_manager:1.1:*:*:*:*:*:*:*
cpe:2.3:a:shelter_manager:animal_shelter_manager:1.3:*:*:*:*:*:*:*
cpe:2.3:a:shelter_manager:animal_shelter_manager:1.11:*:*:*:*:*:*:*
cpe:2.3:a:shelter_manager:animal_shelter_manager:1.12:*:*:*:*:*:*:*
cpe:2.3:a:shelter_manager:animal_shelter_manager:1.20:*:*:*:*:*:*:*
cpe:2.3:a:shelter_manager:animal_shelter_manager:1.22:*:*:*:*:*:*:*
cpe:2.3:a:shelter_manager:animal_shelter_manager:1.30:*:*:*:*:*:*:*
cpe:2.3:a:shelter_manager:animal_shelter_manager:1.30.1:*:*:*:*:*:*:*
cpe:2.3:a:shelter_manager:animal_shelter_manager:1.30.2:*:*:*:*:*:*:*
cpe:2.3:a:shelter_manager:animal_shelter_manager:1.30_beta:*:*:*:*:*:*:*
cpe:2.3:a:shelter_manager:animal_shelter_manager:1.31:*:*:*:*:*:*:*
cpe:2.3:a:shelter_manager:animal_shelter_manager:1.32:*:*:*:*:*:*:*
cpe:2.3:a:shelter_manager:animal_shelter_manager:1.33:*:*:*:*:*:*:*
cpe:2.3:a:shelter_manager:animal_shelter_manager:1.34:*:*:*:*:*:*:*
cpe:2.3:a:shelter_manager:animal_shelter_manager:1.35:*:*:*:*:*:*:*
cpe:2.3:a:shelter_manager:animal_shelter_manager:1.36:*:*:*:*:*:*:*
cpe:2.3:a:shelter_manager:animal_shelter_manager:1.37:*:*:*:*:*:*:*
cpe:2.3:a:shelter_manager:animal_shelter_manager:1.38:*:*:*:*:*:*:*
cpe:2.3:a:shelter_manager:animal_shelter_manager:1.39:*:*:*:*:*:*:*
cpe:2.3:a:shelter_manager:animal_shelter_manager:1.40:*:*:*:*:*:*:*
cpe:2.3:a:shelter_manager:animal_shelter_manager:2.0.1:*:*:*:*:*:*:*
cpe:2.3:a:shelter_manager:animal_shelter_manager:2.0.2:*:*:*:*:*:*:*
cpe:2.3:a:shelter_manager:animal_shelter_manager:2.0.6:*:*:*:*:*:*:*
cpe:2.3:a:shelter_manager:animal_shelter_manager:2.0.8:*:*:*:*:*:*:*
cpe:2.3:a:shelter_manager:animal_shelter_manager:2.0.14:*:*:*:*:*:*:*
cpe:2.3:a:shelter_manager:animal_shelter_manager:2.0.15:*:*:*:*:*:*:*
cpe:2.3:a:shelter_manager:animal_shelter_manager:2.0.16:*:*:*:*:*:*:*
cpe:2.3:a:shelter_manager:animal_shelter_manager:2.0.17:*:*:*:*:*:*:*
cpe:2.3:a:shelter_manager:animal_shelter_manager:2.0.18:*:*:*:*:*:*:*
cpe:2.3:a:shelter_manager:animal_shelter_manager:2.0.21:*:*:*:*:*:*:*
cpe:2.3:a:shelter_manager:animal_shelter_manager:2.0.22:*:*:*:*:*:*:*
cpe:2.3:a:shelter_manager:animal_shelter_manager:2.1.0:*:*:*:*:*:*:*
cpe:2.3:a:shelter_manager:animal_shelter_manager:2.1.1:*:*:*:*:*:*:*
cpe:2.3:a:shelter_manager:animal_shelter_manager:2.2.0:*:*:*:*:*:*:*

EPSS

Процентиль: 16%
0.00049
Низкий

4.6 Medium

CVSS2

Дефекты

CWE-264

Связанные уязвимости

github
больше 3 лет назад

Robin Rawson-Tetley Animal Shelter Manager (ASM) before 2.2.2 does not properly enforce the privileges of user accounts, which allows local users to bypass intended access restrictions by (1) opening unspecified screens, related to the "double click selector bug"; or modifying a (2) animal, (3) owner, (4) lost/found, (5) diary note, (6) owner donation, or (7) waiting list record, related to "change permissions" and the "new UI."

EPSS

Процентиль: 16%
0.00049
Низкий

4.6 Medium

CVSS2

Дефекты

CWE-264