Lucene search
JpcertCVE-2011-2676HistoryNov 03, 2011 - 10:55 a.m.
CVE-2011-2676
2011-11-0310:55:08
CWE-287
jpcert
web.nvd.nist.gov
25
cve-2011-2676
a-form
movable type
authentication bypass
remote modification
CVSS2
5.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:N/I:P/A:P
AI Score
6.3
Confidence
Low
EPSS
0.004
Percentile
72.7%
The A-Form and A-Form bamboo before 1.3.6 and 2.x before 2.0.3, and A-Form PC and PC/Mobile before 3.1, plug-ins for Movable Type do not require administrative authentication, which allows remote authenticated users to modify data via unspecified vectors.
Affected configurations
Node
ark-weba-formRange≤1.3.5
ORark-weba-formMatch2.0.2
ORark-weba-form_bambooMatch1.3.5
ORark-weba-form_bambooMatch2.0.2
ORark-weba-form_pcRange≤3.0
ORark-weba-form_pc_mobileRange≤3.0
six_apartmovable_type
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ark-web | a-form | * | cpe:2.3:a:ark-web:a-form:*:*:*:*:*:*:*:* |
| ark-web | a-form | 2.0.2 | cpe:2.3:a:ark-web:a-form:2.0.2:*:*:*:*:*:*:* |
| ark-web | a-form_bamboo | 1.3.5 | cpe:2.3:a:ark-web:a-form_bamboo:1.3.5:*:*:*:*:*:*:* |
| ark-web | a-form_bamboo | 2.0.2 | cpe:2.3:a:ark-web:a-form_bamboo:2.0.2:*:*:*:*:*:*:* |
| ark-web | a-form_pc | * | cpe:2.3:a:ark-web:a-form_pc:*:*:*:*:*:*:*:* |
| ark-web | a-form_pc_mobile | * | cpe:2.3:a:ark-web:a-form_pc_mobile:*:*:*:*:*:*:*:* |
| six_apart | movable_type | * | cpe:2.3:a:six_apart:movable_type:*:*:*:*:*:*:*:* |
Related
prion
prion
Sql injection
2011-11-03 10:55:00
Cross site scripting
2011-11-03 10:55:00
cvelist
cvelist
CVE-2011-2676
2011-11-03 10:00:00
CVE-2011-4274
2011-11-03 10:00:00
jvn
jvn
JVN#34980730: A-Form vulnerable in restricting access
2011-10-07 00:00:00
nvd
nvd
CVE-2011-2676
2011-11-03 10:55:08
CVE-2011-4274
2011-11-03 10:55:09
cve
cve
CVE-2011-4274
2011-11-03 10:55:09
CVSS2
5.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:N/I:P/A:P
AI Score
6.3
Confidence
Low
EPSS
0.004
Percentile
72.7%
Related for CVE-2011-2676