Lucene search
HistoryApr 10, 2007 - 11:19 p.m.
CVE-2007-1923
vulnerability
ledgersmb
dws systems
sql-ledger
access control
remote attackers
nvd
cwe-264
6.9 Medium
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.016 Low
EPSS
Percentile
87.5%
(1) LedgerSMB and (2) DWS Systems SQL-Ledger implement access control lists by changing the set of URLs linked from menus, which allows remote attackers to access restricted functionality via direct requests. The LedgerSMB affected versions are before 1.3.0.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ledgersmb:ledgersmb | ledgersmb | lt | 1.3.0 |
| sql-ledger:sql-ledger | sql-ledger | eq | - |
Related
prion
prion
Improper access control
2007-04-10 23:19:00
ubuntucve
ubuntucve
CVE-2007-1923
2007-04-10 00:00:00
cvelist
cvelist
CVE-2007-1923
2007-04-10 00:00:00
debiancve
debiancve
CVE-2007-1923
2007-04-10 23:19:00
securityvulns
securityvulns
6.9 Medium
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.016 Low
EPSS
Percentile
87.5%
Related for CVE-2007-1923