CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
AI Score
Confidence
Low
EPSS
Percentile
75.1%
mt-wizard.cgi in Six Apart Movable Type before 4.261, when global templates are not initialized, allows remote attackers to bypass access restrictions and (1) send e-mail to arbitrary addresses or (2) obtain sensitive information via unspecified vectors.
Vendor | Product | Version | CPE |
---|---|---|---|
six_apart | movable_type | 1.54 | cpe:2.3:a:six_apart:movable_type:1.54:*:enterprise:*:*:*:*:* |
six_apart | movable_type | 2.6 | cpe:2.3:a:six_apart:movable_type:2.6:*:*:*:*:*:*:* |
six_apart | movable_type | 2.63 | cpe:2.3:a:six_apart:movable_type:2.63:*:*:*:*:*:*:* |
six_apart | movable_type | 3.3 | cpe:2.3:a:six_apart:movable_type:3.3:*:*:*:*:*:*:* |
six_apart | movable_type | 3.16 | cpe:2.3:a:six_apart:movable_type:3.16:*:*:*:*:*:*:* |
six_apart | movable_type | 3.17 | cpe:2.3:a:six_apart:movable_type:3.17:*:*:*:*:*:*:* |
six_apart | movable_type | 3.32 | cpe:2.3:a:six_apart:movable_type:3.32:*:*:*:*:*:*:* |
six_apart | movable_type | 3.33 | cpe:2.3:a:six_apart:movable_type:3.33:*:*:*:*:*:*:* |
six_apart | movable_type | 3.36 | cpe:2.3:a:six_apart:movable_type:3.36:*:enterprise:*:*:*:*:* |
six_apart | movable_type | 4.20 | cpe:2.3:a:six_apart:movable_type:4.20:*:*:*:*:*:*:* |