Lucene search
HistoryJul 01, 2009 - 1:00 p.m.
CVE-2009-2293
authentication bypass
remote attackers
administrative access
cve-2009-2293
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.2 High
AI Score
Confidence
Low
0.055 Low
EPSS
Percentile
93.2%
Optimum Web Design Tutorial Share 3.5.0 and earlier allows remote attackers to bypass authentication and obtain administrative access by setting the usernamed cookie parameter.
Affected configurations
Node
tutorial-sharetutorial_shareRange≤3.5.0
ORtutorial-sharetutorial_shareMatch3.0.0
ORtutorial-sharetutorial_shareMatch3.0.1
Related
prion
prion
Authentication flaw
2009-07-01 13:00:00
cvelist
cvelist
CVE-2009-2293
2009-07-01 12:26:00
nvd
nvd
CVE-2009-2293
2009-07-01 13:00:01
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.2 High
AI Score
Confidence
Low
0.055 Low
EPSS
Percentile
93.2%
Related for CVE-2009-2293