Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2011-3645
HistorySep 27, 2011 - 7:55 p.m.

CVE-2011-3645

2011-09-2719:55:00
CWE-264
[email protected]
web.nvd.nist.gov
19
newgen omnidocs
access restriction
bypass
parameter modification
cve-2011-3645
nvd

6.9 Medium

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.012 Low

EPSS

Percentile

85.2%

JSON

Newgen OmniDocs allows remote attackers to bypass intended access restrictions via (1) a modified FolderRights parameter to doccab/doclist.jsp, which leads to arbitrary permission changes; or (2) a modified UserIndex parameter to doccab/userprofile/editprofile.jsp, which selects the settings page of an arbitrary user.

Related

prion 1
securityvulns 2
exploitpack 1
packetstorm 1
seebug 1
prion
prion
Design/Logic Flaw
2011-09-27 19:55:00
securityvulns
securityvulns
[CVE-2011-3645] Multiple vulnerability in "Omnidocs"
2011-09-26 00:00:00
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2011-09-26 00:00:00
exploitpack
exploitpack
Omnidocs - Multiple Vulnerabilities
2011-09-27 00:00:00
packetstorm
packetstorm
Omnidocs Privilege Escalation / Direct Object Access
2011-09-26 00:00:00
seebug
seebug
Omnidocs - Multiple Vulnerability
2014-07-01 00:00:00

6.9 Medium

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.012 Low

EPSS

Percentile

85.2%

JSON
Related for CVE-2011-3645
prion1securityvulns2exploitpack1packetstorm1seebug1