Lucene search
HistoryJun 08, 2009 - 7:30 p.m.
CVE-2009-2003
ascad networks
password protector
sd 1.3.1
authentication bypass
cve-2009-2003
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.6 High
AI Score
Confidence
Low
0.011 Low
EPSS
Percentile
84.3%
Ascad Networks Password Protector SD 1.3.1 allows remote attackers to bypass authentication and gain administrative access by setting the (1) c7portal and (2) cookname cookies to “admin.”
Affected configurations
Node
ascadnetworkspassword_protector_sdMatch1.3.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| ascadnetworks:password_protector_sd | ascadnetworks password protector sd | eq | 1.3.1 |
Related
nvd
nvd
CVE-2009-2003
2009-06-08 19:30:00
prion
prion
Authentication flaw
2009-06-08 19:30:00
cvelist
cvelist
CVE-2009-2003
2009-06-08 19:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.6 High
AI Score
Confidence
Low
0.011 Low
EPSS
Percentile
84.3%
Related for CVE-2009-2003