Lucene search

[email protected]CVE-2004-0261

HistoryNov 23, 2004 - 5:00 a.m.

CVE-2004-0261

2004-11-2305:00:00

[email protected]

web.nvd.nist.gov

openjournal

authentication bypass

uid parameter

security vulnerability

cve-2004-0261

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.3 High

AI Score

Confidence

Low

0.018 Low

EPSS

Percentile

88.4%

JSON

oj.cgi in OpenJournal 2.0 through 2.0.5 allows remote attackers to bypass authentication and access the control panel via a 0 in the uid parameter.

Affected configurations

NVD

Node

openjournalopenjournalMatch2.0

openjournalopenjournalMatch2.0_1

openjournalopenjournalMatch2.0_2

openjournalopenjournalMatch2.0_3

openjournalopenjournalMatch2.0_4

openjournalopenjournalMatch2.0_5

CPENameOperatorVersion
openjournal:openjournalopenjournaleq2.0
openjournal:openjournalopenjournaleq2.0_1
openjournal:openjournalopenjournaleq2.0_2
openjournal:openjournalopenjournaleq2.0_3
openjournal:openjournalopenjournaleq2.0_4
openjournal:openjournalopenjournaleq2.0_5

CPE	Name	Operator	Version
openjournal:openjournal	openjournal	eq	2.0
openjournal:openjournal	openjournal	eq	2.0_1
openjournal:openjournal	openjournal	eq	2.0_2
openjournal:openjournal	openjournal	eq	2.0_3
openjournal:openjournal	openjournal	eq	2.0_4
openjournal:openjournal	openjournal	eq	2.0_5

References

marc.info/?l=bugtraq&m=107619136600713&w=2

www.grohol.com/downloads/oj/latest/changelog.txt

www.osvdb.org/3872

www.securityfocus.com/bid/9598

exchange.xforce.ibmcloud.com/vulnerabilities/15069

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.3 High

AI Score

Confidence

Low

0.018 Low

EPSS

Percentile

88.4%

JSON

Related for CVE-2004-0261

cvelist1 nvd1