Lucene search
HistoryNov 01, 2011 - 7:55 p.m.
CVE-2011-4214
cve-2011-4214
aims 2.7.0
bypass authentication
administrator privileges
remote attackers
security vulnerability
nvd
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.1 High
AI Score
Confidence
Low
0.007 Low
EPSS
Percentile
80.7%
OneOrZero Action & Information Management System (AIMS) 2.7.0 allows remote attackers to bypass authentication and obtain administrator privileges via a crafted oozimsrememberme cookie.
Affected configurations
Node
oneorzeroaimsMatch2.7.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| oneorzero:aims | oneorzero aims | eq | 2.7.0 |
Related
nvd
nvd
CVE-2011-4214
2011-11-01 19:55:02
cvelist
cvelist
CVE-2011-4214
2011-11-01 19:00:00
prion
prion
Authentication flaw
2011-11-01 19:55:00
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.1 High
AI Score
Confidence
Low
0.007 Low
EPSS
Percentile
80.7%
Related for CVE-2011-4214