Lucene search

MitreCVE-2009-2125

HistoryJun 19, 2009 - 6:00 p.m.

CVE-2009-2125

2009-06-1918:00:00

CWE-264

mitre

web.nvd.nist.gov

elvin

delete_bug.php

unauthorized access

bug deletion

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

AI Score

6.6

Confidence

Low

EPSS

0.001

Percentile

45.5%

JSON

delete_bug.php in Elvin before 1.2.1 does not require administrative privileges, which allows remote authenticated users to bypass intended access restrictions and delete arbitrary bugs.

Affected configurations

Nvd

Node

elvinbtselvinbtsRange≤1.2.0

elvinbtselvinbtsMatch1.1.0

VendorProductVersionCPE
elvinbtselvinbts*cpe:2.3:a:elvinbts:elvinbts:*:*:*:*:*:*:*:*
elvinbtselvinbts1.1.0cpe:2.3:a:elvinbts:elvinbts:1.1.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
elvinbts	elvinbts	*	cpe:2.3:a:elvinbts:elvinbts::::::::
elvinbts	elvinbts	1.1.0	cpe:2.3:a:elvinbts:elvinbts:1.1.0:::::::*

References

bugs.elvinbts.org/show_bug.php?id=50

osvdb.org/55101

secunia.com/advisories/35430

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

AI Score

6.6

Confidence

Low

EPSS

0.001

Percentile

45.5%

JSON

Related for CVE-2009-2125