Lucene search

[email protected]CVE-2017-15205

HistoryOct 03, 2022 - 4:23 p.m.

CVE-2017-15205

2022-10-0316:23:33

CWE-200

[email protected]

web.nvd.nist.gov

kanboard

security

vulnerability

cve-2017-15205

data breach

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

4.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.9%

JSON

In Kanboard before 1.0.47, by altering form data, an authenticated user can download attachments from a private project of another user.

Affected configurations

NVD

Node

kanboardkanboardMatch1.0.0

kanboardkanboardMatch1.0.1

kanboardkanboardMatch1.0.2

kanboardkanboardMatch1.0.3

kanboardkanboardMatch1.0.4

kanboardkanboardMatch1.0.5

kanboardkanboardMatch1.0.6

kanboardkanboardMatch1.0.7

kanboardkanboardMatch1.0.8

kanboardkanboardMatch1.0.9

kanboardkanboardMatch1.0.10

kanboardkanboardMatch1.0.11

kanboardkanboardMatch1.0.12

kanboardkanboardMatch1.0.13

kanboardkanboardMatch1.0.14

kanboardkanboardMatch1.0.15

kanboardkanboardMatch1.0.16

kanboardkanboardMatch1.0.17

kanboardkanboardMatch1.0.18

kanboardkanboardMatch1.0.19

kanboardkanboardMatch1.0.20

kanboardkanboardMatch1.0.21

kanboardkanboardMatch1.0.22

kanboardkanboardMatch1.0.23

kanboardkanboardMatch1.0.24

kanboardkanboardMatch1.0.25

kanboardkanboardMatch1.0.26

kanboardkanboardMatch1.0.27

kanboardkanboardMatch1.0.28

kanboardkanboardMatch1.0.29

kanboardkanboardMatch1.0.30

kanboardkanboardMatch1.0.31

kanboardkanboardMatch1.0.31beta0

kanboardkanboardMatch1.0.31beta1

kanboardkanboardMatch1.0.32

kanboardkanboardMatch1.0.32beta0

kanboardkanboardMatch1.0.32beta1

kanboardkanboardMatch1.0.33

kanboardkanboardMatch1.0.34

kanboardkanboardMatch1.0.35

kanboardkanboardMatch1.0.36

kanboardkanboardMatch1.0.37

kanboardkanboardMatch1.0.38

kanboardkanboardMatch1.0.39

kanboardkanboardMatch1.0.40

kanboardkanboardMatch1.0.41

kanboardkanboardMatch1.0.42

kanboardkanboardMatch1.0.43

kanboardkanboardMatch1.0.44

kanboardkanboardMatch1.0.45

kanboardkanboardMatch1.0.46

CPENameOperatorVersion
kanboard:kanboardkanboardeq1.0.0
kanboard:kanboardkanboardeq1.0.1
kanboard:kanboardkanboardeq1.0.2
kanboard:kanboardkanboardeq1.0.3
kanboard:kanboardkanboardeq1.0.4
kanboard:kanboardkanboardeq1.0.5
kanboard:kanboardkanboardeq1.0.6
kanboard:kanboardkanboardeq1.0.7
kanboard:kanboardkanboardeq1.0.8
kanboard:kanboardkanboardeq1.0.9

CPE	Name	Operator	Version
kanboard:kanboard	kanboard	eq	1.0.0
kanboard:kanboard	kanboard	eq	1.0.1
kanboard:kanboard	kanboard	eq	1.0.2
kanboard:kanboard	kanboard	eq	1.0.3
kanboard:kanboard	kanboard	eq	1.0.4
kanboard:kanboard	kanboard	eq	1.0.5
kanboard:kanboard	kanboard	eq	1.0.6
kanboard:kanboard	kanboard	eq	1.0.7
kanboard:kanboard	kanboard	eq	1.0.8
kanboard:kanboard	kanboard	eq	1.0.9

Rows per page:

1-10 of 471

References

openwall.com/lists/oss-security/2017/10/04/9

github.com/kanboard/kanboard/commit/7100f6de8a1f566e260b3e65312767e4cde112b1

kanboard.net/news/version-1.0.47

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

4.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.9%

JSON

Related for CVE-2017-15205

nvd1 cvelist1 debiancve1 prion1 osv1