CVE-2010-5108

Опубликовано: 13 нояб. 2019

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

Trac 0.11.6 does not properly check workflow permissions before modifying a ticket. This can be exploited by an attacker to change the status and resolution of tickets without having proper permissions.

Ссылки

http://www.openwall.com/lists/oss-security/2013/02/13/2
Mailing List
Third Party Advisory
https://access.redhat.com/security/cve/cve-2010-5108
Broken Link
Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2010-5108
Third Party Advisory
http://www.openwall.com/lists/oss-security/2013/02/13/2
Mailing List
Third Party Advisory
https://access.redhat.com/security/cve/cve-2010-5108
Broken Link
Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2010-5108
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:edgewall:trac:0.11.6:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

EPSS

Процентиль: 54%

0.00311

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-276

Связанные уязвимости

CVE-2010-5108

CVSS3: 7.5

ubuntu

около 6 лет назад

CVE-2010-5108

CVSS3: 7.5

debian

около 6 лет назад

Trac 0.11.6 does not properly check workflow permissions before modify ...

GHSA-pcm6-w2q9-cfq4

github

больше 3 лет назад

EPSS

Процентиль: 54%

0.00311

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-276