Lucene search
HistoryMar 31, 2010 - 6:00 p.m.
CVE-2010-1191
cve-2010-1191
sahana
disaster management
security bypass
access restrictions
nvd
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:P/A:P
7 High
AI Score
Confidence
Low
0.008 Low
EPSS
Percentile
82.1%
Sahana disaster management system 0.6.2.2, and possibly other versions, allows remote attackers to bypass intended access restrictions and disable administrator authentication via a direct request to stream.php in an acl_enable_acl action to the admin module.
Affected configurations
Node
sahanafoundationsahanaMatch0.6.2.2
| CPE | Name | Operator | Version |
|---|---|---|---|
| sahanafoundation:sahana | sahanafoundation sahana | eq | 0.6.2.2 |
Related
nessus
nessus
Fedora 12 : sahana-0.6.3-1.fc12 (2010-6379)
2010-07-01 00:00:00
openvas
openvas
Sahana 'stream.php' Authentication Bypass Vulnerability
2010-03-22 00:00:00
Sahana <= 0.6.2.2 'stream.php' Authentication Bypass Vulnerability
2010-03-22 00:00:00
Fedora Update for sahana FEDORA-2010-6379
2010-05-07 00:00:00
fedora
fedora
[SECURITY] Fedora 12 Update: sahana-0.6.3-1.fc12
2010-05-07 03:54:55
cvelist
cvelist
CVE-2010-1191
2010-03-31 17:35:00
nvd
nvd
CVE-2010-1191
2010-03-31 18:00:00
prion
prion
Authentication flaw
2010-03-31 18:00:00
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:P/A:P
7 High
AI Score
Confidence
Low
0.008 Low
EPSS
Percentile
82.1%
Related for CVE-2010-1191