CVE-2016-4896

Опубликовано: 12 апр. 2017

Источник: nvd

CVSS3: 6.5

CVSS2: 6.4

EPSS Низкий

Описание

SetsucoCMS all versions does not properly manage sessions, which allows remote attackers to disclose or alter unauthorized information via unspecified vectors.

Ссылки

http://jvn.jp/en/jp/JVN80157683/index.html
Third Party Advisory
VDB Entry
http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000201.html
VDB Entry
http://www.securityfocus.com/bid/93475
Third Party Advisory
VDB Entry
http://jvn.jp/en/jp/JVN80157683/index.html
Third Party Advisory
VDB Entry
http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000201.html
VDB Entry
http://www.securityfocus.com/bid/93475
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:setucocms_project:setucocms:-:*:*:*:*:*:*:*

EPSS

Процентиль: 50%

0.00272

Низкий

6.5 Medium

CVSS3

6.4 Medium

CVSS2

Дефекты

CWE-264

Связанные уязвимости

GHSA-x9mc-v59g-fp35