Lucene search

[email protected]CVE-2010-5089

HistoryOct 03, 2022 - 4:21 p.m.

CVE-2010-5089

2022-10-0316:21:03

CWE-264

[email protected]

web.nvd.nist.gov

cve-2010-5089

silverstripe

access restriction

sensitive information disclosure

nvd

security vulnerability

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

6.6 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

64.6%

JSON

SilverStripe before 2.4.2 does not properly restrict access to pages in draft mode, which allows remote attackers to obtain sensitive information.

Affected configurations

NVD

Node

silverstripesilverstripeRange≤2.4.1

silverstripesilverstripeMatch2.0.0

silverstripesilverstripeMatch2.0.1

silverstripesilverstripeMatch2.0.2

silverstripesilverstripeMatch2.1.0

silverstripesilverstripeMatch2.1.1

silverstripesilverstripeMatch2.2.0

silverstripesilverstripeMatch2.2.1

silverstripesilverstripeMatch2.2.2

silverstripesilverstripeMatch2.2.4

silverstripesilverstripeMatch2.3.0

silverstripesilverstripeMatch2.3.0rc1

silverstripesilverstripeMatch2.3.0rc2

silverstripesilverstripeMatch2.3.0rc3

silverstripesilverstripeMatch2.3.1

silverstripesilverstripeMatch2.3.1rc1

silverstripesilverstripeMatch2.3.1rc2

silverstripesilverstripeMatch2.3.2

silverstripesilverstripeMatch2.3.3

silverstripesilverstripeMatch2.3.4

silverstripesilverstripeMatch2.3.5

silverstripesilverstripeMatch2.3.6

silverstripesilverstripeMatch2.3.7

silverstripesilverstripeMatch2.3.8

silverstripesilverstripeMatch2.3.9

silverstripesilverstripeMatch2.3.10

silverstripesilverstripeMatch2.4.0

CPENameOperatorVersion
silverstripe:silverstripesilverstripele2.4.1
silverstripe:silverstripesilverstripeeq2.0.0
silverstripe:silverstripesilverstripeeq2.0.1
silverstripe:silverstripesilverstripeeq2.0.2
silverstripe:silverstripesilverstripeeq2.1.0
silverstripe:silverstripesilverstripeeq2.1.1
silverstripe:silverstripesilverstripeeq2.2.0
silverstripe:silverstripesilverstripeeq2.2.1
silverstripe:silverstripesilverstripeeq2.2.2
silverstripe:silverstripesilverstripeeq2.2.4

CPE	Name	Operator	Version
silverstripe:silverstripe	silverstripe	le	2.4.1
silverstripe:silverstripe	silverstripe	eq	2.0.0
silverstripe:silverstripe	silverstripe	eq	2.0.1
silverstripe:silverstripe	silverstripe	eq	2.0.2
silverstripe:silverstripe	silverstripe	eq	2.1.0
silverstripe:silverstripe	silverstripe	eq	2.1.1
silverstripe:silverstripe	silverstripe	eq	2.2.0
silverstripe:silverstripe	silverstripe	eq	2.2.1
silverstripe:silverstripe	silverstripe	eq	2.2.2
silverstripe:silverstripe	silverstripe	eq	2.2.4

Rows per page:

1-10 of 221

References

doc.silverstripe.org/sapphire/en/trunk/changelogs//2.4.2

open.silverstripe.org/changeset/110757

www.openwall.com/lists/oss-security/2012/04/30/1

www.openwall.com/lists/oss-security/2012/04/30/3

www.openwall.com/lists/oss-security/2012/05/01/3

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

6.6 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

64.6%

JSON

Related for CVE-2010-5089

prion1 nvd1 cvelist1