Lucene search
HistoryMar 02, 2007 - 9:18 p.m.
CVE-2007-1156
jbrowser
remote attackers
bypass authentication
administrative capabilities
nvd
7.2 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.092 Low
EPSS
Percentile
94.6%
JBrowser allows remote attackers to bypass authentication and access certain administrative capabilities via a direct request for _admin/.
| CPE | Name | Operator | Version |
|---|---|---|---|
| man_machine_systems:jbrowser | man machine systems jbrowser | eq | * |
Related
prion
prion
Authentication flaw
2007-03-02 21:18:00
nessus
nessus
JBrowser _admin/ Direct Request Admin Authentication Bypass
2004-02-02 00:00:00
securityvulns
securityvulns
JBoss insecure defaults
2007-02-23 00:00:00
7.2 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.092 Low
EPSS
Percentile
94.6%
Related for CVE-2007-1156