Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2008-6603
HistoryApr 03, 2009 - 6:30 p.m.

CVE-2008-6603

2009-04-0318:30:00
Debian Security Bug Tracker
security-tracker.debian.org
11

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.019

Percentile

88.4%

MoinMoin 1.6.2 and 1.7 does not properly enforce ACL checks when acl_hierarchic is set to True, which might allow remote attackers to bypass intended access restrictions, a different vulnerability than CVE-2008-1937.

OSVersionArchitecturePackageVersionFilename
Debian10allmoin< 1.7.1-1moin_1.7.1-1_all.deb

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.019

Percentile

88.4%