Lucene search

MitreCVE-2007-5210

HistoryOct 04, 2007 - 11:17 p.m.

CVE-2007-5210

2007-10-0423:17:00

CWE-264

mitre

web.nvd.nist.gov

arbor networks

peakflow sp

vulnerability

cve-2007-5210

access restrictions

remote authenticated users

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

AI Score

6.1

Confidence

Low

EPSS

0.004

Percentile

73.9%

JSON

Arbor Networks Peakflow SP before 3.5.1 patch 14, and 3.6.x before 3.6.1 patch 5, allows remote authenticated users to bypass access restrictions and read or write unspecified data via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected configurations

Nvd

Node

arbor_networkspeakflow_spMatch3.5.1

arbor_networkspeakflow_spMatch3.6.1

VendorProductVersionCPE
arbor_networkspeakflow_sp3.5.1cpe:2.3:a:arbor_networks:peakflow_sp:3.5.1:*:*:*:*:*:*:*
arbor_networkspeakflow_sp3.6.1cpe:2.3:a:arbor_networks:peakflow_sp:3.6.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
arbor_networks	peakflow_sp	3.5.1	cpe:2.3:a:arbor_networks:peakflow_sp:3.5.1:::::::*
arbor_networks	peakflow_sp	3.6.1	cpe:2.3:a:arbor_networks:peakflow_sp:3.6.1:::::::*

References

secunia.com/advisories/27003

www.securityfocus.com/bid/25907

exchange.xforce.ibmcloud.com/vulnerabilities/36924

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

AI Score

6.1

Confidence

Low

EPSS

0.004

Percentile

73.9%

JSON

Related for CVE-2007-5210