Lucene search

[email protected]CVE-2007-1183

HistoryMar 02, 2007 - 9:18 p.m.

CVE-2007-1183

2007-03-0221:18:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2007-1183

webapp

remote authenticated users

spoof

real name

whitespace

security vulnerability

6.4 Medium

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.016 Low

EPSS

Percentile

87.1%

JSON

WebAPP before 0.9.9.5 allows remote authenticated users to spoof another user’s Real Name via whitespace, which has unknown impact and attack vectors.

CPENameOperatorVersion
web-app.org:webappweb-app.org webapple0.9.9.4

CPE	Name	Operator	Version
web-app.org:webapp	web-app.org webapp	le	0.9.9.4

References

osvdb.org/33293

secunia.com/advisories/24080

www.securityfocus.com/bid/22563

www.vupen.com/english/advisories/2007/0604

www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=250

6.4 Medium

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.016 Low

EPSS

Percentile

87.1%

JSON

Related for CVE-2007-1183

prion1 securityvulns1