Lucene search

K
jvnJapan Vulnerability NotesJVN:53293565
HistoryJan 11, 2011 - 12:00 a.m.

JVN#53293565: Contents-Mall vulnerability in password handling

2011-01-1100:00:00
Japan Vulnerability Notes
jvn.jp
13

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

EPSS

0.006

Percentile

77.6%

Contents-Mall is a shopping cart software for digital contents. Contents-Mall contains a vulnerability in the way it handles passwords.

Impact

The administrative password may be disclosed. As a result, information stored by the software may be viewed or altered.

Solution

Update** the software**
Update to the latest version according to the information provided by the developer.

This issue has been resolved in Contents-Mall Ver.15.00.

Products Affected

  • Contents-Mall Ver.14.00 and earlier

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

EPSS

0.006

Percentile

77.6%

Related for JVN:53293565