Lucene search

K
cve[email protected]CVE-2009-4762
HistoryMar 29, 2010 - 8:30 p.m.

CVE-2009-4762

2010-03-2920:30:00
CWE-264
web.nvd.nist.gov
18
moinmoin
cve-2009-4762
access restriction bypass
nvd

6.5 Medium

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.018 Low

EPSS

Percentile

88.0%

MoinMoin 1.7.x before 1.7.3 and 1.8.x before 1.8.3 checks parent ACLs in certain inappropriate circumstances during processing of hierarchical ACLs, which allows remote attackers to bypass intended access restrictions by requesting an item, a different vulnerability than CVE-2008-6603.

Affected configurations

NVD
Node
moinmomoinmoinMatch1.7.0
OR
moinmomoinmoinMatch1.7.1
OR
moinmomoinmoinMatch1.7.2
OR
moinmomoinmoinMatch1.8.0
OR
moinmomoinmoinMatch1.8.1
OR
moinmomoinmoinMatch1.8.2

6.5 Medium

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.018 Low

EPSS

Percentile

88.0%