Lucene search
HistoryAug 08, 2007 - 10:17 p.m.
CVE-2007-4230
cve-2007-4230
bellabiblio
remote attackers
admin privileges
cookie
md5 hash
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.9 Medium
AI Score
Confidence
Low
0.022 Low
EPSS
Percentile
89.4%
BellaBiblio allows remote attackers to gain administrative privileges via a bellabiblio cookie with the value “administrator.” NOTE: this issue is disputed by CVE and multiple third parties because the cookie value must be an MD5 hash
Affected configurations
Node
jems_scriptsbellabiblio
| CPE | Name | Operator | Version |
|---|---|---|---|
| jems_scripts:bellabiblio | jems scripts bellabiblio | eq | * |
References
Related
prion
prion
Code injection
2007-08-08 22:17:00
nvd
nvd
CVE-2007-4230
2007-08-08 22:17:00
cvelist
cvelist
CVE-2007-4230
2007-08-08 22:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.9 Medium
AI Score
Confidence
Low
0.022 Low
EPSS
Percentile
89.4%
Related for CVE-2007-4230