Lucene search
HistoryJul 12, 2010 - 1:27 p.m.
CVE-2009-4929
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.8 Medium
AI Score
Confidence
High
0.009 Low
EPSS
Percentile
82.8%
admin/manage_users.php in TotalCalendar 2.4 does not require administrative authentication, which allows remote attackers to change arbitrary passwords via the newPW1 and newPW2 parameters.
Affected configurations
Node
sweetphptotalcalenderMatch2.4
Related
cvelist
cvelist
CVE-2009-4929
2010-07-09 17:00:00
seebug
seebug
TotalCalendar manage_users.php页面非授权更改口令漏洞
2010-07-15 00:00:00
prion
prion
Authentication flaw
2010-07-12 13:27:00
cve
cve
CVE-2009-4929
2010-07-12 13:27:16
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.8 Medium
AI Score
Confidence
High
0.009 Low
EPSS
Percentile
82.8%
Related for NVD:CVE-2009-4929