Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2008-7219
HistorySep 13, 2009 - 10:30 p.m.

CVE-2008-7219

2009-09-1322:30:00
CWE-264
mitre
web.nvd.nist.gov
32
cve-2008-7219
horde kronolith
nag
mnemo
groupware
webmail
security vulnerability
ownership validation
nvd

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.7

Confidence

Low

EPSS

0.013

Percentile

85.9%

JSON

Horde Kronolith H3 2.1 before 2.1.7 and 2.2 before 2.2-RC2; Nag H3 2.1 before 2.1.4 and 2.2 before 2.2-RC2; Mnemo H3 2.1 before 2.1.2 and H3 2.2 before 2.2-RC2; Groupware 1.0 before 1.0.3 and 1.1 before 1.1-RC2; and Groupware Webmail Edition 1.0 before 1.0.4 and 1.1 before 1.1-RC2 does not validate ownership when performing share changes, which has unknown impact and attack vectors.

Affected configurations

Nvd
Node
hordegroupwareMatch1.0
OR
hordegroupwareMatch1.0.1
OR
hordegroupwareMatch1.0.2
OR
hordegroupwareMatch1.1
OR
hordegroupware_webmail_editionMatch1.0
OR
hordegroupware_webmail_editionMatch1.0.2
OR
hordegroupware_webmail_editionMatch1.0.3
OR
hordegroupware_webmail_editionMatch1.1
OR
hordekronolith_h3Match2.1
OR
hordekronolith_h3Match2.1.1
OR
hordekronolith_h3Match2.1.2
OR
hordekronolith_h3Match2.1.3
OR
hordekronolith_h3Match2.1.4
OR
hordekronolith_h3Match2.1.5
OR
hordekronolith_h3Match2.1.6
OR
hordekronolith_h3Match2.2
OR
hordemnemo_h3Match2.1
OR
hordemnemo_h3Match2.1.1
OR
hordemnemo_h3Match2.2
OR
hordenag_h3Match2.1
OR
hordenag_h3Match2.1.1
OR
hordenag_h3Match2.1.2
OR
hordenag_h3Match2.1.3
OR
hordenag_h3Match2.2
VendorProductVersionCPE
hordegroupware1.0cpe:2.3:a:horde:groupware:1.0:*:*:*:*:*:*:*
hordegroupware1.0.1cpe:2.3:a:horde:groupware:1.0.1:*:*:*:*:*:*:*
hordegroupware1.0.2cpe:2.3:a:horde:groupware:1.0.2:*:*:*:*:*:*:*
hordegroupware1.1cpe:2.3:a:horde:groupware:1.1:*:*:*:*:*:*:*
hordegroupware_webmail_edition1.0cpe:2.3:a:horde:groupware_webmail_edition:1.0:*:*:*:*:*:*:*
hordegroupware_webmail_edition1.0.2cpe:2.3:a:horde:groupware_webmail_edition:1.0.2:*:*:*:*:*:*:*
hordegroupware_webmail_edition1.0.3cpe:2.3:a:horde:groupware_webmail_edition:1.0.3:*:*:*:*:*:*:*
hordegroupware_webmail_edition1.1cpe:2.3:a:horde:groupware_webmail_edition:1.1:*:*:*:*:*:*:*
hordekronolith_h32.1cpe:2.3:a:horde:kronolith_h3:2.1:*:*:*:*:*:*:*
hordekronolith_h32.1.1cpe:2.3:a:horde:kronolith_h3:2.1.1:*:*:*:*:*:*:*
Rows per page:
1-10 of 241

Related

cvelist 1
ubuntucve 1
prion 1
nvd 1
openvas 2
nessus 1
cvelist
cvelist
CVE-2008-7219
2009-09-13 22:00:00
ubuntucve
ubuntucve
CVE-2008-7219
2009-09-13 00:00:00
prion
prion
Design/Logic Flaw
2009-09-13 22:30:00
nvd
nvd
CVE-2008-7219
2009-09-13 22:30:00
openvas
openvas
Fedora Update for kronolith FEDORA-2008-2212
2009-02-16 00:00:00
Fedora Update for kronolith FEDORA-2008-2212
2009-02-16 00:00:00
nessus
nessus
Fedora 7 : kronolith-2.1.7-1.fc7 (2008-2212)
2008-03-07 00:00:00

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.7

Confidence

Low

EPSS

0.013

Percentile

85.9%

JSON
Related for CVE-2008-7219
cvelist1ubuntucve1prion1nvd1openvas2nessus1