Lucene search
JpcertCVE-2011-3993HistoryNov 03, 2011 - 5:55 p.m.
CVE-2011-3993
2011-11-0317:55:01
CWE-264
jpcert
web.nvd.nist.gov
28
cve-2011-3993
nvd
skyarc mtcms
movable type
weak permissions
remote authenticated users
file modification
CVSS2
5.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:N/I:P/A:P
AI Score
6.4
Confidence
Low
EPSS
0.001
Percentile
50.8%
SKYARC MTCMS before 5.252, and the MultiFileUploader 0.44 and earlier, DuplicateEntry 1.2 and earlier, MailPack 1.741 and earlier, and AutoTagging 0.08 and earlier plugins for Movable Type, uses weak permissions, which allows remote authenticated users to modify files and settings via unspecified vectors.
Affected configurations
Node
skyarcautotaggingRange≤0.08
ORskyarcduplicateentryRange≤1.2
ORskyarcmailpackRange≤1.741
ORskyarcmtcmsRange≤5.251
ORskyarcmtcmsMatch5.2
ORskyarcmtcmsMatch5.21
ORskyarcmtcmsMatch5.22
ORskyarcmtcmsMatch5.23
ORskyarcmtcmsMatch5.24
ORskyarcmtcmsMatch5.24enterprise
ORskyarcmtcmsMatch5.24smart
ORskyarcmtcmsMatch5.25
ORskyarcmtcmsMatch5.25enterprise
ORskyarcmtcmsMatch5.25smart
ORskyarcmtcmsMatch5.251enterprise
ORskyarcmtcmsMatch5.251smart
ORskyarcmultifileuploaderRange≤0.44
| Vendor | Product | Version | CPE |
|---|---|---|---|
| skyarc | autotagging | * | cpe:2.3:a:skyarc:autotagging:*:*:*:*:*:*:*:* |
| skyarc | duplicateentry | * | cpe:2.3:a:skyarc:duplicateentry:*:*:*:*:*:*:*:* |
| skyarc | mailpack | * | cpe:2.3:a:skyarc:mailpack:*:*:*:*:*:*:*:* |
| skyarc | mtcms | * | cpe:2.3:a:skyarc:mtcms:*:*:*:*:*:*:*:* |
| skyarc | mtcms | 5.2 | cpe:2.3:a:skyarc:mtcms:5.2:*:*:*:*:*:*:* |
| skyarc | mtcms | 5.21 | cpe:2.3:a:skyarc:mtcms:5.21:*:*:*:*:*:*:* |
| skyarc | mtcms | 5.22 | cpe:2.3:a:skyarc:mtcms:5.22:*:*:*:*:*:*:* |
| skyarc | mtcms | 5.23 | cpe:2.3:a:skyarc:mtcms:5.23:*:*:*:*:*:*:* |
| skyarc | mtcms | 5.24 | cpe:2.3:a:skyarc:mtcms:5.24:*:*:*:*:*:*:* |
| skyarc | mtcms | 5.24 | cpe:2.3:a:skyarc:mtcms:5.24:*:enterprise:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2011-3993
2011-11-03 17:00:00
prion
prion
Design/Logic Flaw
2011-11-03 17:55:00
jvn
jvn
nvd
nvd
CVE-2011-3993
2011-11-03 17:55:01
CVSS2
5.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:N/I:P/A:P
AI Score
6.4
Confidence
Low
EPSS
0.001
Percentile
50.8%
Related for CVE-2011-3993