Lucene search

K
freebsdFreeBSD253EA131-BD12-11D8-B071-00E08110B673
HistoryJun 01, 2004 - 12:00 a.m.

Gallery 1.4.3 and ealier user authentication bypass

2004-06-0100:00:00
vuxml.freebsd.org
12

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.004 Low

EPSS

Percentile

72.8%

A flaw exists in Gallery versions previous to
1.4.3-pl1 and post 1.2 which may give an attacker
the potential to log in under the “admin” account.
Data outside of the gallery is unaffected and the
attacker cannot modify any data other than the
photos or photo albums.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchgallery< 1.4.3.2UNKNOWN

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.004 Low

EPSS

Percentile

72.8%

Related for 253EA131-BD12-11D8-B071-00E08110B673