Lucene search
HistoryJan 30, 2000 - 5:00 a.m.
CVE-2000-0117
cve
cobalt raq2
siteusermod.cgi
password modification
security vulnerability
6.8 Medium
AI Score
Confidence
Low
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
12.2%
The siteUserMod.cgi program in Cobalt RaQ2 servers allows any Site Administrator to modify passwords for other users, site administrators, and possibly admin (root).
| CPE | Name | Operator | Version |
|---|---|---|---|
| sun:cobalt_raq_3i | sun cobalt raq 3i | eq | * |
| sun:cobalt_raq_2 | sun cobalt raq 2 | eq | * |
| sun:cobalt_raq | sun cobalt raq | eq | 1.0 |
References
6.8 Medium
AI Score
Confidence
Low
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
12.2%
Related for CVE-2000-0117