Lucene search
HistoryAug 21, 2009 - 2:30 p.m.
CVE-2008-7024
arz development
gemini portal
authentication bypass
cve-2008-7024
admin privileges
remote attack
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.3 High
AI Score
Confidence
Low
0.106 Low
EPSS
Percentile
95.1%
admin.php in Arz Development The Gemini Portal 4.7 and earlier allows remote attackers to bypass authentication and gain administrator privileges by setting the user cookie to “admin” and setting the name parameter to “users.”
Affected configurations
Node
arzdevgemini_liteMatch3.5
ORarzdevgemini_liteMatch3.6
ORarzdevgemini_portalMatch4.7
Related
nvd
nvd
CVE-2008-7024
2009-08-21 14:30:00
prion
prion
Authentication flaw
2009-08-21 14:30:00
cvelist
cvelist
CVE-2008-7024
2009-08-21 14:00:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.3 High
AI Score
Confidence
Low
0.106 Low
EPSS
Percentile
95.1%
Related for CVE-2008-7024