CVE-2008-7069

2009-08-2510:30:00

CWE-200

[email protected]

web.nvd.nist.gov

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.3

Confidence

Low

EPSS

0.009

Percentile

82.5%

JSON

All Club CMS (ACCMS) 0.0.2 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain database configuration information, including credentials, via a direct request to accms.dat.

Affected configurations

Nvd

Node

paul_arbogastaccmsRange≤0.0.2

paul_arbogastaccmsMatch0.0.1a

paul_arbogastaccmsMatch0.0.1c

paul_arbogastaccmsMatch0.0.1d

paul_arbogastaccmsMatch0.0.1e

paul_arbogastaccmsMatch0.0.1f

paul_arbogastaccmsMatch0.0.1g

paul_arbogastaccmsMatch0.0.1h

VendorProductVersionCPE
paul_arbogastaccms*cpe:2.3:a:paul_arbogast:accms:*:*:*:*:*:*:*:*
paul_arbogastaccms0.0.1acpe:2.3:a:paul_arbogast:accms:0.0.1a:*:*:*:*:*:*:*
paul_arbogastaccms0.0.1ccpe:2.3:a:paul_arbogast:accms:0.0.1c:*:*:*:*:*:*:*
paul_arbogastaccms0.0.1dcpe:2.3:a:paul_arbogast:accms:0.0.1d:*:*:*:*:*:*:*
paul_arbogastaccms0.0.1ecpe:2.3:a:paul_arbogast:accms:0.0.1e:*:*:*:*:*:*:*
paul_arbogastaccms0.0.1fcpe:2.3:a:paul_arbogast:accms:0.0.1f:*:*:*:*:*:*:*
paul_arbogastaccms0.0.1gcpe:2.3:a:paul_arbogast:accms:0.0.1g:*:*:*:*:*:*:*
paul_arbogastaccms0.0.1hcpe:2.3:a:paul_arbogast:accms:0.0.1h:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
paul_arbogast	accms	*	cpe:2.3:a:paul_arbogast:accms::::::::
paul_arbogast	accms	0.0.1a	cpe:2.3:a:paul_arbogast:accms:0.0.1a:::::::*
paul_arbogast	accms	0.0.1c	cpe:2.3:a:paul_arbogast:accms:0.0.1c:::::::*
paul_arbogast	accms	0.0.1d	cpe:2.3:a:paul_arbogast:accms:0.0.1d:::::::*
paul_arbogast	accms	0.0.1e	cpe:2.3:a:paul_arbogast:accms:0.0.1e:::::::*
paul_arbogast	accms	0.0.1f	cpe:2.3:a:paul_arbogast:accms:0.0.1f:::::::*
paul_arbogast	accms	0.0.1g	cpe:2.3:a:paul_arbogast:accms:0.0.1g:::::::*
paul_arbogast	accms	0.0.1h	cpe:2.3:a:paul_arbogast:accms:0.0.1h:::::::*