CVE-2007-0669

2007-02-0822:28:00

[email protected]

web.nvd.nist.gov

cve-2007-0669

twiki

vulnerability

local users

perl code

cgi session files

nvd

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

6.9 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.3%

JSON

Unspecified vulnerability in Twiki 4.0.0 through 4.1.0 allows local users to execute arbitrary Perl code via unknown vectors related to CGI session files.

Affected configurations

NVD

Node

twikitwikiMatch4.0.0

twikitwikiMatch4.0.1

twikitwikiMatch4.0.2

twikitwikiMatch4.0.3

twikitwikiMatch4.0.4

twikitwikiMatch4.0.5

twikitwikiMatch4.1.0

CPENameOperatorVersion
twiki:twikitwikieq4.0.0
twiki:twikitwikieq4.0.1
twiki:twikitwikieq4.0.2
twiki:twikitwikieq4.0.3
twiki:twikitwikieq4.0.4
twiki:twikitwikieq4.0.5
twiki:twikitwikieq4.1.0

CPE	Name	Operator	Version
twiki:twiki	twiki	eq	4.0.0
twiki:twiki	twiki	eq	4.0.1
twiki:twiki	twiki	eq	4.0.2
twiki:twiki	twiki	eq	4.0.3
twiki:twiki	twiki	eq	4.0.4
twiki:twiki	twiki	eq	4.0.5
twiki:twiki	twiki	eq	4.1.0