Lucene search

K
nvd[email protected]NVD:CVE-2007-3643
HistoryJul 10, 2007 - 1:30 a.m.

CVE-2007-3643

2007-07-1001:30:00
web.nvd.nist.gov

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

6.7 Medium

AI Score

Confidence

Low

0.016 Low

EPSS

Percentile

87.4%

admin/index.php in AV Arcade 2.1b grants administrative privileges when the ava_userid cookie value is 1, which allows remote attackers to perform certain administrative actions.

Affected configurations

NVD
Node
av_scriptsav_arcadeMatch2.1b

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

6.7 Medium

AI Score

Confidence

Low

0.016 Low

EPSS

Percentile

87.4%

Related for NVD:CVE-2007-3643