Lucene search

K
cve[email protected]CVE-2009-4592
HistoryJan 07, 2010 - 6:30 p.m.

CVE-2009-4592

2010-01-0718:30:01
web.nvd.nist.gov
31
cve-2009-4592
vulnerability
base_local_rules.php
basic analysis and security engine
base
remote attackers
arbitrary local files
security issue

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.8 Medium

AI Score

Confidence

Low

0.011 Low

EPSS

Percentile

84.2%

Unspecified vulnerability in base_local_rules.php in Basic Analysis and Security Engine (BASE) before 1.4.4 allows remote attackers to include arbitrary local files via unknown vectors.

Affected configurations

NVD
Node
secureideasbaseRange1.4.3
OR
secureideasbaseMatch0.9.8
OR
secureideasbaseMatch0.9.9
OR
secureideasbaseMatch1.0
OR
secureideasbaseMatch1.2.4
OR
secureideasbaseMatch1.2.5
OR
secureideasbaseMatch1.2.6
OR
secureideasbaseMatch1.2.7
OR
secureideasbaseMatch1.3.5
OR
secureideasbaseMatch1.3.6
OR
secureideasbaseMatch1.3.8
OR
secureideasbaseMatch1.3.9
OR
secureideasbaseMatch1.4.0
OR
secureideasbaseMatch1.4.1

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.8 Medium

AI Score

Confidence

Low

0.011 Low

EPSS

Percentile

84.2%

Related for CVE-2009-4592