Lucene search

K
nvd[email protected]NVD:CVE-2005-4850
HistoryDec 31, 2005 - 5:00 a.m.

CVE-2005-4850

2005-12-3105:00:00
CWE-264
web.nvd.nist.gov
1

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

6.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.9%

eZ publish 3.5 through 3.7 before 20050608 requires both edit and create permissions in order to submit data, which allows remote attackers to edit data submitted by arbitrary anonymous users.

Affected configurations

NVD
Node
ezez_publishRange3.5.03.7

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

6.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.9%

Related for NVD:CVE-2005-4850