Lucene search
Japan Vulnerability NotesJVN:85118545HistorySep 30, 2015 - 12:00 a.m.
JVN#85118545: MATCHA SNS access restriction bypass vulnerability
2015-09-3000:00:00
Japan Vulnerability Notes
jvn.jp
16
CVSS2
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
EPSS
0.002
Percentile
62.1%
MATCHA SNS provided by ICZ Corporation is an SNS software. MATCHA SNS contains an access restriction bypass vulnerability.
Impact
A user without administrative privileges may obtain administrative privileges.
Solution
Update the Software
Update to the latest version according to the information provided by the developer.
Products Affected
- MATCHA SNS 1.3.6 and earlier
Related
nvd
nvd
CVE-2015-5645
2015-10-06 01:59:25
prion
prion
Code injection
2015-10-06 01:59:00
cvelist
cvelist
CVE-2015-5645
2015-10-03 10:00:00
cve
cve
CVE-2015-5645
2015-10-06 01:59:25
CVSS2
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
EPSS
0.002
Percentile
62.1%
Related for JVN:85118545