Lucene search

[email protected]NVD:CVE-2008-6109

HistoryFeb 11, 2009 - 12:30 a.m.

CVE-2008-6109

2009-02-1100:30:00

CWE-264

[email protected]

web.nvd.nist.gov

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

6.4 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

Robin Rawson-Tetley Animal Shelter Manager (ASM) before 2.2.2 does not properly enforce the privileges of user accounts, which allows local users to bypass intended access restrictions by (1) opening unspecified screens, related to the “double click selector bug”; or modifying a (2) animal, (3) owner, (4) lost/found, (5) diary note, (6) owner donation, or (7) waiting list record, related to “change permissions” and the “new UI.”

Affected configurations

NVD

Node

shelter_manageranimal_shelter_managerRange≤2.2.1

shelter_manageranimal_shelter_managerMatch1.1

shelter_manageranimal_shelter_managerMatch1.3

shelter_manageranimal_shelter_managerMatch1.11

shelter_manageranimal_shelter_managerMatch1.12

shelter_manageranimal_shelter_managerMatch1.20

shelter_manageranimal_shelter_managerMatch1.22

shelter_manageranimal_shelter_managerMatch1.30

shelter_manageranimal_shelter_managerMatch1.30.1

shelter_manageranimal_shelter_managerMatch1.30.2

shelter_manageranimal_shelter_managerMatch1.30_beta

shelter_manageranimal_shelter_managerMatch1.31

shelter_manageranimal_shelter_managerMatch1.32

shelter_manageranimal_shelter_managerMatch1.33

shelter_manageranimal_shelter_managerMatch1.34

shelter_manageranimal_shelter_managerMatch1.35

shelter_manageranimal_shelter_managerMatch1.36

shelter_manageranimal_shelter_managerMatch1.37

shelter_manageranimal_shelter_managerMatch1.38

shelter_manageranimal_shelter_managerMatch1.39

shelter_manageranimal_shelter_managerMatch1.40

shelter_manageranimal_shelter_managerMatch2.0.1

shelter_manageranimal_shelter_managerMatch2.0.2

shelter_manageranimal_shelter_managerMatch2.0.6

shelter_manageranimal_shelter_managerMatch2.0.8

shelter_manageranimal_shelter_managerMatch2.0.14

shelter_manageranimal_shelter_managerMatch2.0.15

shelter_manageranimal_shelter_managerMatch2.0.16

shelter_manageranimal_shelter_managerMatch2.0.17

shelter_manageranimal_shelter_managerMatch2.0.18

shelter_manageranimal_shelter_managerMatch2.0.21

shelter_manageranimal_shelter_managerMatch2.0.22

shelter_manageranimal_shelter_managerMatch2.1.0

shelter_manageranimal_shelter_managerMatch2.1.1

shelter_manageranimal_shelter_managerMatch2.2.0

References

secunia.com/advisories/30041

sourceforge.net/project/shownotes.php?group_id=82533&release_id=596220

www.securityfocus.com/bid/29022

exchange.xforce.ibmcloud.com/vulnerabilities/42139

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

6.4 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for NVD:CVE-2008-6109

cvelist1 cve1 prion1