Lucene search

K
cve[email protected]CVE-2009-2393
HistoryJul 09, 2009 - 4:30 p.m.

CVE-2009-2393

2009-07-0916:30:00
CWE-264
web.nvd.nist.gov
17
cve-2009-2393
virtuenetz
virtue online test generator
administrative privileges
remote authenticated users
nvd

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

6.5 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

66.0%

admin/index.php in Virtuenetz Virtue Online Test Generator does not require administrative privileges, which allows remote authenticated users to have an unknown impact via unspecified vectors.

Affected configurations

NVD
Node
virtuenetzvirtue_online_test_generator

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

6.5 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

66.0%

Related for CVE-2009-2393