Lucene search

[email protected]CVE-2005-2185

HistoryJul 11, 2005 - 4:00 a.m.

CVE-2005-2185

2005-07-1104:00:00

[email protected]

web.nvd.nist.gov

eroom

expiration

replay attacks

nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.2 High

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

80.7%

JSON

eRoom does not set an expiration for Cookies, which allows remote attackers to capture cookies and conduct replay attacks.

Affected configurations

NVD

Node

emceroomMatch6.0

emceroomMatch6.0.1

emceroomMatch6.0.2

emceroomMatch6.0.3

emceroomMatch6.0.4

emceroomMatch6.0.5

emceroomMatch6.0.6

emceroomMatch6.0.7

CPENameOperatorVersion
emc:eroomemc eroomeq6.0
emc:eroomemc eroomeq6.0.1
emc:eroomemc eroomeq6.0.2
emc:eroomemc eroomeq6.0.3
emc:eroomemc eroomeq6.0.4
emc:eroomemc eroomeq6.0.5
emc:eroomemc eroomeq6.0.6
emc:eroomemc eroomeq6.0.7

CPE	Name	Operator	Version
emc:eroom	emc eroom	eq	6.0
emc:eroom	emc eroom	eq	6.0.1
emc:eroom	emc eroom	eq	6.0.2
emc:eroom	emc eroom	eq	6.0.3
emc:eroom	emc eroom	eq	6.0.4
emc:eroom	emc eroom	eq	6.0.5
emc:eroom	emc eroom	eq	6.0.6
emc:eroom	emc eroom	eq	6.0.7

References

marc.info/?l=bugtraq&m=112069267700034&w=2

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.2 High

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

80.7%

JSON

Related for CVE-2005-2185

nvd1 cvelist1