Lucene search
HistoryAug 06, 2004 - 4:00 a.m.
CVE-2004-0522
cve-2004-0522
gallery
authentication bypass
administrator privileges
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
6.6 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
72.8%
Gallery 1.4.3 and earlier allows remote attackers to bypass authentication and obtain Gallery administrator privileges.
Affected configurations
Node
gallery_projectgalleryMatch1.4
ORgallery_projectgalleryMatch1.4.1
ORgallery_projectgalleryMatch1.4.2
ORgallery_projectgalleryMatch1.4.3_pl1
ORgallery_projectgalleryMatch1.4_pl1
ORgallery_projectgalleryMatch1.4_pl2
Node
debiandebian_linuxMatch3.0
ORdebiandebian_linuxMatch3.0alpha
ORdebiandebian_linuxMatch3.0arm
ORdebiandebian_linuxMatch3.0hppa
ORdebiandebian_linuxMatch3.0ia-32
ORdebiandebian_linuxMatch3.0ia-64
ORdebiandebian_linuxMatch3.0m68k
ORdebiandebian_linuxMatch3.0mips
ORdebiandebian_linuxMatch3.0mipsel
ORdebiandebian_linuxMatch3.0ppc
ORdebiandebian_linuxMatch3.0s-390
ORdebiandebian_linuxMatch3.0sparc
Related
nessus
nessus
FreeBSD : Gallery 1.4.3 and ealier user authentication bypass (253ea131-bd12-11d8-b071-00e08110b673)
2009-04-23 00:00:00
Gallery init.php Authentication Bypass
2004-06-15 00:00:00
Debian DSA-512-1 : gallery - unauthenticated access
2004-09-29 00:00:00
osv
osv
gallery - unauthenticated access
2004-06-02 00:00:00
nvd
nvd
CVE-2004-0522
2004-08-06 04:00:00
freebsd
freebsd
Gallery 1.4.3 and ealier user authentication bypass
2004-06-01 00:00:00
openvas
openvas
Debian Security Advisory DSA 512-1 (gallery)
2008-01-17 00:00:00
Gentoo Security Advisory GLSA 200406-10 (gallery)
2008-09-24 00:00:00
FreeBSD Ports: gallery
2008-09-04 00:00:00
cvelist
cvelist
CVE-2004-0522
2004-06-08 04:00:00
gentoo
gentoo
Gallery: Privilege escalation vulnerability
2004-06-15 00:00:00
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
6.6 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
72.8%
Related for CVE-2004-0522