Lucene search

K
cveMitreCVE-2009-4909
HistoryJun 25, 2010 - 7:30 p.m.

CVE-2009-4909

2010-06-2519:30:01
CWE-287
mitre
web.nvd.nist.gov
22
cve-2009-4909
oblog
brute-force
password guessing
security vulnerability

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7

Confidence

Low

EPSS

0.005

Percentile

76.0%

admin/index.php in oBlog allows remote attackers to conduct brute-force password guessing attacks via HTTP requests.

Affected configurations

Nvd
Node
dootzkyoblog
VendorProductVersionCPE
dootzkyoblog*cpe:2.3:a:dootzky:oblog:*:*:*:*:*:*:*:*

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7

Confidence

Low

EPSS

0.005

Percentile

76.0%

Related for CVE-2009-4909