Lucene search
HistoryMay 15, 2009 - 3:30 p.m.
CVE-2009-1638
cve-2009-1638
techno dreams
job career package 3.0
authentication bypass
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.2 High
AI Score
Confidence
Low
0.05 Low
EPSS
Percentile
92.9%
Techno Dreams Job Career Package 3.0 allows remote attackers to bypass authentication and obtain administrative access by setting the JobCareerAdmin cookie to Login.
Affected configurations
Node
t-dreamsjob_career_packageMatch3.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| t-dreams:job_career_package | t-dreams job career package | eq | 3.0 |
Related
cvelist
cvelist
CVE-2009-1638
2009-05-15 15:00:00
nvd
nvd
CVE-2009-1638
2009-05-15 15:30:00
prion
prion
Authentication flaw
2009-05-15 15:30:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.2 High
AI Score
Confidence
Low
0.05 Low
EPSS
Percentile
92.9%
Related for CVE-2009-1638