Lucene search
HistoryApr 28, 2009 - 4:30 p.m.
CVE-2009-1462
cve-2009-1462
razorcms
security manager
permission verification
local users
nvd
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
6.5 Medium
AI Score
Confidence
Low
0.0005 Low
EPSS
Percentile
17.2%
The Security Manager in razorCMS before 0.4 does not verify the permissions of every file owned by the apache user account, which is inconsistent with the documentation and allows local users to have an unspecified impact.
Affected configurations
Node
razorcmsrazorcmsRange≤0.3
ORrazorcmsrazorcmsMatch0.2
ORrazorcmsrazorcmsMatch0.3rc2
| CPE | Name | Operator | Version |
|---|---|---|---|
| razorcms:razorcms | razorcms | le | 0.3 |
| razorcms:razorcms | razorcms | eq | 0.2 |
Related
prion
prion
Design/Logic Flaw
2009-04-28 16:30:00
cvelist
cvelist
CVE-2009-1462
2009-04-28 16:00:00
nvd
nvd
CVE-2009-1462
2009-04-28 16:30:03
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
6.5 Medium
AI Score
Confidence
Low
0.0005 Low
EPSS
Percentile
17.2%
Related for CVE-2009-1462