Lucene search

K
cveMitreCVE-2007-6690
HistoryJan 17, 2008 - 2:00 a.m.

CVE-2007-6690

2008-01-1702:00:00
CWE-264
mitre
web.nvd.nist.gov
25
cve-2007-6690
gallery remote
menalto gallery
permissions
gr commands
nvd

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.4

Confidence

Low

EPSS

0.004

Percentile

75.5%

The Gallery Remote module in Menalto Gallery before 2.2.4 does not check permissions for unspecified GR commands, which has unknown impact and attack vectors.

Affected configurations

Nvd
Node
menaltogalleryRange2.2.3
VendorProductVersionCPE
menaltogallery*cpe:2.3:a:menalto:gallery:*:*:*:*:*:*:*:*

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.4

Confidence

Low

EPSS

0.004

Percentile

75.5%