Lucene search
HistoryOct 03, 2022 - 4:21 p.m.
CVE-2010-5092
cve-2010-5092
silverstripe 2.4.0
security
admin page
user passwords
plaintext
database
1.9 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:M/Au:N/C:P/I:N/A:N
5.9 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
The Add Member dialog in the Security admin page in SilverStripe 2.4.0 saves user passwords in plaintext, which allows local users to obtain sensitive information by reading a database.
Affected configurations
Node
silverstripesilverstripeMatch2.4.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| silverstripe:silverstripe | silverstripe | eq | 2.4.0 |
Related
cvelist
cvelist
CVE-2010-5092
2022-10-03 16:21:02
prion
prion
Information disclosure
2012-08-26 18:55:00
nvd
nvd
CVE-2010-5092
2012-08-26 18:55:01
1.9 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:M/Au:N/C:P/I:N/A:N
5.9 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2010-5092