CVE-2007-0829

2007-02-0722:28:00

[email protected]

web.nvd.nist.gov

cve-2007-0829

avast

server edition

authentication bypass

nvd

6.6 Medium

AI Score

Confidence

Low

4.4 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

5.2%

JSON

avast! Server Edition before 4.7.726 does not demand a password in a certain intended context, even when a password has been set, which allows local users to bypass authentication requirements.

Affected configurations

NVD

Node

alwilavast_antivirusMatch4.6.460server

alwilavast_antivirusMatch4.6.489server

alwilavast_antivirusMatch4.6.566server

alwilavast_antivirusMatch4.7.660server

alwilavast_antivirusMatch4.7.676server

CPENameOperatorVersion
alwil:avast_antivirusalwil avast antiviruseq4.6.460
alwil:avast_antivirusalwil avast antiviruseq4.6.489
alwil:avast_antivirusalwil avast antiviruseq4.6.566
alwil:avast_antivirusalwil avast antiviruseq4.7.660
alwil:avast_antivirusalwil avast antiviruseq4.7.676

CPE	Name	Operator	Version
alwil:avast_antivirus	alwil avast antivirus	eq	4.6.460
alwil:avast_antivirus	alwil avast antivirus	eq	4.6.489
alwil:avast_antivirus	alwil avast antivirus	eq	4.6.566
alwil:avast_antivirus	alwil avast antivirus	eq	4.7.660
alwil:avast_antivirus	alwil avast antivirus	eq	4.7.676