CVE-2006-1505

2006-03-3001:06:00

[email protected]

web.nvd.nist.gov

cve-2006-1505

base

security

authentication bypass

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.8 Medium

AI Score

Confidence

Low

0.023 Low

EPSS

Percentile

89.7%

JSON

base_maintenance.php in Basic Analysis and Security Engine (BASE) before 1.2.4 (melissa), when running in standalone mode, allows remote attackers to bypass authentication, possibly by setting the standalone parameter to “yes”.

Affected configurations

NVD

Node

basic_analysis_and_security_enginebaseMatch1.1.2_zora

basic_analysis_and_security_enginebaseMatch1.1.3_lynn

basic_analysis_and_security_enginebaseMatch1.1.4_cheryl

basic_analysis_and_security_enginebaseMatch1.1_elizabeth

basic_analysis_and_security_enginebaseMatch1.2.1_kris

basic_analysis_and_security_enginebaseMatch1.2.2_cindy

basic_analysis_and_security_enginebaseMatch1.2_betty

CPENameOperatorVersion
basic_analysis_and_security_engine:basebasic analysis and security engine baseeq1.1.2_zora
basic_analysis_and_security_engine:basebasic analysis and security engine baseeq1.1.3_lynn
basic_analysis_and_security_engine:basebasic analysis and security engine baseeq1.1.4_cheryl
basic_analysis_and_security_engine:basebasic analysis and security engine baseeq1.1_elizabeth
basic_analysis_and_security_engine:basebasic analysis and security engine baseeq1.2.1_kris
basic_analysis_and_security_engine:basebasic analysis and security engine baseeq1.2.2_cindy
basic_analysis_and_security_engine:basebasic analysis and security engine baseeq1.2_betty

CPE	Name	Operator	Version
basic_analysis_and_security_engine:base	basic analysis and security engine base	eq	1.1.2_zora
basic_analysis_and_security_engine:base	basic analysis and security engine base	eq	1.1.3_lynn
basic_analysis_and_security_engine:base	basic analysis and security engine base	eq	1.1.4_cheryl
basic_analysis_and_security_engine:base	basic analysis and security engine base	eq	1.1_elizabeth
basic_analysis_and_security_engine:base	basic analysis and security engine base	eq	1.2.1_kris
basic_analysis_and_security_engine:base	basic analysis and security engine base	eq	1.2.2_cindy
basic_analysis_and_security_engine:base	basic analysis and security engine base	eq	1.2_betty