Lucene search
HistoryApr 28, 2009 - 4:30 p.m.
CVE-2009-1462
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
6.3 Medium
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
17.2%
The Security Manager in razorCMS before 0.4 does not verify the permissions of every file owned by the apache user account, which is inconsistent with the documentation and allows local users to have an unspecified impact.
Affected configurations
Node
razorcmsrazorcmsRange≤0.3
ORrazorcmsrazorcmsMatch0.2
ORrazorcmsrazorcmsMatch0.3rc2
Related
prion
prion
Design/Logic Flaw
2009-04-28 16:30:00
cve
cve
CVE-2009-1462
2009-04-28 16:30:03
cvelist
cvelist
CVE-2009-1462
2009-04-28 16:00:00
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
6.3 Medium
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
17.2%
Related for NVD:CVE-2009-1462