Lucene search
HistoryAug 12, 2012 - 9:55 p.m.
CVE-2012-3472
cve-2012-3472
email api
ushahidi platform
authentication bypass
remote attackers
nvd
7.5 High
AI Score
Confidence
Low
6.4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:P/A:P
0.002 Low
EPSS
Percentile
60.9%
The email API in application/libraries/api/MY_Email_Api_Object.php in the Ushahidi Platform before 2.5 does not require authentication, which allows remote attackers to list, delete, or organize messages via a GET request.
Related
prion
prion
Authentication flaw
2012-08-12 21:55:00
cvelist
cvelist
CVE-2012-3472
2022-10-03 16:15:23
7.5 High
AI Score
Confidence
Low
6.4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:P/A:P
0.002 Low
EPSS
Percentile
60.9%
Related for CVE-2012-3472