Lucene search

[email protected]CVE-2017-15200

HistoryOct 03, 2022 - 4:23 p.m.

CVE-2017-15200

2022-10-0316:23:35

CWE-639

[email protected]

web.nvd.nist.gov

kanboard

cve-2017-15200

authenticated user

private project

security vulnerability

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

4.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.0%

JSON

In Kanboard before 1.0.47, by altering form data, an authenticated user can add a new task to a private project of another user.

Affected configurations

NVD

Node

kanboardkanboardMatch1.0.0

kanboardkanboardMatch1.0.1

kanboardkanboardMatch1.0.2

kanboardkanboardMatch1.0.3

kanboardkanboardMatch1.0.4

kanboardkanboardMatch1.0.5

kanboardkanboardMatch1.0.6

kanboardkanboardMatch1.0.7

kanboardkanboardMatch1.0.8

kanboardkanboardMatch1.0.9

kanboardkanboardMatch1.0.10

kanboardkanboardMatch1.0.11

kanboardkanboardMatch1.0.12

kanboardkanboardMatch1.0.13

kanboardkanboardMatch1.0.14

kanboardkanboardMatch1.0.15

kanboardkanboardMatch1.0.16

kanboardkanboardMatch1.0.17

kanboardkanboardMatch1.0.18

kanboardkanboardMatch1.0.19

kanboardkanboardMatch1.0.20

kanboardkanboardMatch1.0.21

kanboardkanboardMatch1.0.22

kanboardkanboardMatch1.0.23

kanboardkanboardMatch1.0.24

kanboardkanboardMatch1.0.25

kanboardkanboardMatch1.0.26

kanboardkanboardMatch1.0.27

kanboardkanboardMatch1.0.28

kanboardkanboardMatch1.0.29

kanboardkanboardMatch1.0.30

kanboardkanboardMatch1.0.31

kanboardkanboardMatch1.0.31beta0

kanboardkanboardMatch1.0.31beta1

kanboardkanboardMatch1.0.32

kanboardkanboardMatch1.0.32beta0

kanboardkanboardMatch1.0.32beta1

kanboardkanboardMatch1.0.33

kanboardkanboardMatch1.0.34

kanboardkanboardMatch1.0.35

kanboardkanboardMatch1.0.36

kanboardkanboardMatch1.0.37

kanboardkanboardMatch1.0.38

kanboardkanboardMatch1.0.39

kanboardkanboardMatch1.0.40

kanboardkanboardMatch1.0.41

kanboardkanboardMatch1.0.42

kanboardkanboardMatch1.0.43

kanboardkanboardMatch1.0.44

kanboardkanboardMatch1.0.45

kanboardkanboardMatch1.0.46

CPENameOperatorVersion
kanboard:kanboardkanboardeq1.0.0
kanboard:kanboardkanboardeq1.0.1
kanboard:kanboardkanboardeq1.0.2
kanboard:kanboardkanboardeq1.0.3
kanboard:kanboardkanboardeq1.0.4
kanboard:kanboardkanboardeq1.0.5
kanboard:kanboardkanboardeq1.0.6
kanboard:kanboardkanboardeq1.0.7
kanboard:kanboardkanboardeq1.0.8
kanboard:kanboardkanboardeq1.0.9

CPE	Name	Operator	Version
kanboard:kanboard	kanboard	eq	1.0.0
kanboard:kanboard	kanboard	eq	1.0.1
kanboard:kanboard	kanboard	eq	1.0.2
kanboard:kanboard	kanboard	eq	1.0.3
kanboard:kanboard	kanboard	eq	1.0.4
kanboard:kanboard	kanboard	eq	1.0.5
kanboard:kanboard	kanboard	eq	1.0.6
kanboard:kanboard	kanboard	eq	1.0.7
kanboard:kanboard	kanboard	eq	1.0.8
kanboard:kanboard	kanboard	eq	1.0.9

Rows per page:

1-10 of 471

References

openwall.com/lists/oss-security/2017/10/04/9

github.com/kanboard/kanboard/commit/074f6c104f3e49401ef0065540338fc2d4be79f0

github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524

kanboard.net/news/version-1.0.47

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

4.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.0%

JSON

Related for CVE-2017-15200

nvd1 osv1 prion1 cvelist1 debiancve1