Lucene search

K
nvd[email protected]NVD:CVE-2008-6399
HistoryMar 05, 2009 - 8:30 p.m.

CVE-2008-6399

2009-03-0520:30:00
CWE-264
web.nvd.nist.gov
2

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

AI Score

6.6

Confidence

High

EPSS

0.003

Percentile

71.4%

Unspecified vulnerability in DotNetNuke 4.5.2 through 4.9 allows remote attackers to “add additional roles to their user account” via unknown attack vectors.

Affected configurations

Nvd
Node
dotnetnukedotnetnukeMatch4.5.2
OR
dotnetnukedotnetnukeMatch4.8.1
OR
dotnetnukedotnetnukeMatch4.8.2
OR
dotnetnukedotnetnukeMatch4.8.3
OR
dotnetnukedotnetnukeMatch4.8.4
OR
dotnetnukedotnetnukeMatch4.9
VendorProductVersionCPE
dotnetnukedotnetnuke4.5.2cpe:2.3:a:dotnetnuke:dotnetnuke:4.5.2:*:*:*:*:*:*:*
dotnetnukedotnetnuke4.8.1cpe:2.3:a:dotnetnuke:dotnetnuke:4.8.1:*:*:*:*:*:*:*
dotnetnukedotnetnuke4.8.2cpe:2.3:a:dotnetnuke:dotnetnuke:4.8.2:*:*:*:*:*:*:*
dotnetnukedotnetnuke4.8.3cpe:2.3:a:dotnetnuke:dotnetnuke:4.8.3:*:*:*:*:*:*:*
dotnetnukedotnetnuke4.8.4cpe:2.3:a:dotnetnuke:dotnetnuke:4.8.4:*:*:*:*:*:*:*
dotnetnukedotnetnuke4.9cpe:2.3:a:dotnetnuke:dotnetnuke:4.9:*:*:*:*:*:*:*

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

AI Score

6.6

Confidence

High

EPSS

0.003

Percentile

71.4%

Related for NVD:CVE-2008-6399