Lucene search
+L

CVE-2020-9315

🗓️ 10 May 2020 22:23:02Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 153 Views🌐 WEB

Oracle iPlanet Web Server 7.0.x Incorrect Access Control for admingui/version URI

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
attackerkb
attackerkb
CVE-2020-9314
10 May 202023:15
–attackerkb
attackerkb
attackerkb
CVE-2020-9315
10 May 202023:15
–attackerkb
bdu_fstec
BDU FSTEC
Oracle iPlanet web server Key Disclosure
2 Feb 202100:00
–bdu_fstec
circl
Circl
CVE-2020-9315
11 May 202016:22
–circl
cnvd
CNVD
Oracle iPlanet Web Server is vulnerable to cryptographic issues (CNVD-2020-52060)
11 May 202000:00
–cnvd
checkpoint_advisories
Check Point Advisories
Oracle iPlanet Web Server Authentication Bypass (CVE-2020-9315)
23 Feb 202100:00
–checkpoint_advisories
cvelist
Cvelist
CVE-2020-9315
10 May 202022:23
–cvelist
kittysploit
KittySploit
Oracle iPlanet Web Server 7.0.x - Authentication Bypass Detection
28 Jul 202611:27
–kittysploit
nuclei
Nuclei
Oracle iPlanet Web Server 7.0.x - Image Injection
5 Nov 202602:03
–nuclei
nuclei
Nuclei
Oracle iPlanet Web Server 7.0.x - Authentication Bypass
1 Nov 202602:03
–nuclei
Rows per page
NVD
Node
oracleiplanet_web_serverRange7.0–7.0.27
ParameterPositionPathDescriptionCWE
serverTasksGeneral.GeneralWebserverTabs.TabHref=2query param/admingui/version/serverTasksGeneral?serverTasksGeneral.GeneralWebserverTabs.TabHref=2Incorrect access control allowing unauthenticated read access to encryption keys via the Administration console.CWE-306
serverConfigurationsGeneral.GeneralWebserverTabs.TabHref=4query param/admingui/version/serverConfigurationsGeneral?serverConfigurationsGeneral.GeneralWebserverTabs.TabHref=4Incorrect access control allowing unauthenticated read access to encryption keys via the Administration console.CWE-306

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation