Lucene search
HistoryJul 12, 2010 - 1:27 p.m.
CVE-2010-2685
cve-2010-2685
customer paradigm
pagedirector cms
access restriction bypass
adduser.php
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.9 Medium
AI Score
Confidence
Low
0.014 Low
EPSS
Percentile
86.4%
siteadmin/adduser.php in Customer Paradigm PageDirector CMS does not properly restrict access, which allows remote attackers to bypass intended restrictions and add administrative users via a direct request.
Affected configurations
Node
customerparadigmpagedirector_cms
| CPE | Name | Operator | Version |
|---|---|---|---|
| customerparadigm:pagedirector_cms | customerparadigm pagedirector cms | eq | * |
Related
prion
prion
Server side request forgery (ssrf)
2010-07-12 13:27:00
nvd
nvd
CVE-2010-2685
2010-07-12 13:27:28
cvelist
cvelist
CVE-2010-2685
2010-07-09 19:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.9 Medium
AI Score
Confidence
Low
0.014 Low
EPSS
Percentile
86.4%
Related for CVE-2010-2685