CVE-2010-0935

Опубликовано: 05 мар. 2010

Источник: nvd

CVSS2: 4.6

EPSS Низкий

Описание

Perforce Server 2009.2 and earlier, when the protection table is empty, allows remote authenticated users to obtain super privileges via a "p4 protect" command.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:perforce:perforce_server:*:*:*:*:*:*:*:*

Версия до 2009.2 (включая)

cpe:2.3:a:perforce:perforce_server:97.3:*:*:*:*:*:*:*

cpe:2.3:a:perforce:perforce_server:98.2:*:*:*:*:*:*:*

cpe:2.3:a:perforce:perforce_server:99.1:*:*:*:*:*:*:*

cpe:2.3:a:perforce:perforce_server:99.2:*:*:*:*:*:*:*

cpe:2.3:a:perforce:perforce_server:2000.1:*:*:*:*:*:*:*

cpe:2.3:a:perforce:perforce_server:2000.2:*:*:*:*:*:*:*

cpe:2.3:a:perforce:perforce_server:2001.1:*:*:*:*:*:*:*

cpe:2.3:a:perforce:perforce_server:2001.2:*:*:*:*:*:*:*

cpe:2.3:a:perforce:perforce_server:2002.1:*:*:*:*:*:*:*

cpe:2.3:a:perforce:perforce_server:2002.2:*:*:*:*:*:*:*

cpe:2.3:a:perforce:perforce_server:2003.1:*:*:*:*:*:*:*

cpe:2.3:a:perforce:perforce_server:2003.2:*:*:*:*:*:*:*

cpe:2.3:a:perforce:perforce_server:2004.2:*:*:*:*:*:*:*

cpe:2.3:a:perforce:perforce_server:2005.1:*:*:*:*:*:*:*

cpe:2.3:a:perforce:perforce_server:2005.2:*:*:*:*:*:*:*

cpe:2.3:a:perforce:perforce_server:2006.1:*:*:*:*:*:*:*

cpe:2.3:a:perforce:perforce_server:2006.2:*:*:*:*:*:*:*

cpe:2.3:a:perforce:perforce_server:2007.2:*:*:*:*:*:*:*

cpe:2.3:a:perforce:perforce_server:2007.3:*:*:*:*:*:*:*

cpe:2.3:a:perforce:perforce_server:2007.3_143793:*:*:*:*:*:*:*

cpe:2.3:a:perforce:perforce_server:2008.1:*:*:*:*:*:*:*

cpe:2.3:a:perforce:perforce_server:2008.2:*:*:*:*:*:*:*

EPSS

Процентиль: 63%

0.00449

Низкий

4.6 Medium

CVSS2

Дефекты

CWE-264

Связанные уязвимости

GHSA-4x2v-66mc-66vr

github

почти 4 года назад