Lucene search

[email protected]CVE-2002-2027

HistoryOct 03, 2022 - 4:23 p.m.

CVE-2002-2027

2022-10-0316:23:50

[email protected]

web.nvd.nist.gov

cve-2002-2027

database security

user permissions

remote attack

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.1 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

73.7%

JSON

Database of Our Owlish Wisdom (DOOW) 0.1 through 0.2.1 does not properly verify user permissions, which allows remote attackers to perform unauthorized activities.

Affected configurations

NVD

Node

doowdoowMatch0.1

doowdoowMatch0.1.1

doowdoowMatch0.2

doowdoowMatch0.2.1

CPENameOperatorVersion
doow:doowdooweq0.1
doow:doowdooweq0.1.1
doow:doowdooweq0.2
doow:doowdooweq0.2.1

CPE	Name	Operator	Version
doow:doow	doow	eq	0.1
doow:doow	doow	eq	0.1.1
doow:doow	doow	eq	0.2
doow:doow	doow	eq	0.2.1

References

prdownloads.sourceforge.net/doow/doow_v0.2.2.zip?use_mirror=unc

www.securityfocus.com/bid/3932

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.1 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

73.7%

JSON

Related for CVE-2002-2027

nvd1 cvelist1