Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2016-9646
HistoryApr 13, 2018 - 3:29 p.m.

CVE-2016-9646

2018-04-1315:29:00
CWE-287
[email protected]
web.nvd.nist.gov

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

7.2 High

AI Score

Confidence

High

0.012 Low

EPSS

Percentile

85.3%

JSON

ikiwiki before 3.20161229 incorrectly called the CGI::FormBuilder->field method (similar to the CGI->param API that led to Bugzilla’s CVE-2014-1572), which can be abused to lead to commit metadata forgery.

Affected configurations

NVD
Node
ikiwikiikiwikiRange<3.20161229
Node
debiandebian_linuxMatch7.0
OR
debiandebian_linuxMatch8.0
OR
debiandebian_linuxMatch9.0

Related

ubuntucve 3
prion 3
cvelist 3
debiancve 2
cve 3
freebsd 3
openvas 12
nessus 14
thn 1
checkpoint_advisories 1
nvd 2
debian 2
fedora 5
osv 2
securityvulns 3
mageia 2
gentoo 1
ubuntucve
ubuntucve
CVE-2016-9646
2018-04-13 00:00:00
CVE-2014-1572
2014-10-13 00:00:00
CVE-2017-0356
2018-04-13 00:00:00
prion
prion
Design/Logic Flaw
2018-04-13 15:29:00
Design/Logic Flaw
2014-10-13 01:55:00
Authentication flaw
2018-04-13 15:29:00
cvelist
cvelist
CVE-2016-9646 Commit metadata forgery via CGI::FormBuilder context-dependent APIs
2016-12-29 00:00:00
CVE-2014-1572
2014-10-13 01:00:00
CVE-2017-0356 Authentication bypass via repeated parameters
2017-01-11 00:00:00
debiancve
debiancve
CVE-2016-9646
2018-04-13 15:29:00
CVE-2017-0356
2018-04-13 15:29:00
cve
cve
CVE-2016-9646
2018-04-13 15:29:00
CVE-2014-1572
2014-10-13 01:55:06
CVE-2017-0356
2018-04-13 15:29:00
freebsd
freebsd
ikiwiki -- multiple vulnerabilities
2016-12-19 00:00:00
ikiwiki -- authentication bypass vulnerability
2017-01-11 00:00:00
Bugzilla multiple security issues
2014-10-06 00:00:00
openvas
openvas
IkiWiki Multiple Vulnerabilities
2018-04-18 00:00:00
IkiWiki Authentication Bypass Vulnerability
2018-04-18 00:00:00
Debian: Security Advisory (DSA-3760-1)
2017-01-11 00:00:00
nessus
nessus
FreeBSD : ikiwiki -- multiple vulnerabilities (5ed094a0-0150-11e7-ae1b-002590263bf5)
2017-03-06 00:00:00
FreeBSD : ikiwiki -- authentication bypass vulnerability (7b35a77a-0151-11e7-ae1b-002590263bf5)
2017-03-06 00:00:00
Fedora 24 : ikiwiki (2017-8873ebdb43)
2017-01-31 00:00:00
thn
thn
Zero-Day in Bugzilla Exposes Zero-Day Vulnerabilities to Hackers
2014-10-06 22:37:00
checkpoint_advisories
checkpoint_advisories
Bugzilla Privilege Escalation - Email Validation Bypass (CVE-2014-1572)
2014-10-02 00:00:00
nvd
nvd
CVE-2014-1572
2014-10-13 01:55:06
CVE-2017-0356
2018-04-13 15:29:00
debian
debian
[SECURITY] [DSA 3760-1] ikiwiki security update
2017-01-12 15:01:19
[SECURITY] [DLA 812-1] ikiwiki security update
2017-01-31 20:28:50
fedora
fedora
[SECURITY] Fedora 25 Update: ikiwiki-3.20170111-1.fc25
2017-01-27 19:22:10
[SECURITY] Fedora 24 Update: ikiwiki-3.20170111-1.fc24
2017-01-27 19:19:01
[SECURITY] Fedora 21 Update: bugzilla-4.4.6-1.fc21
2014-11-01 17:10:00
osv
osv
ikiwiki - security update
2017-01-12 00:00:00
ikiwiki - security update
2017-01-31 00:00:00
securityvulns
securityvulns
Security advisory for Bugzilla 4.5.6, 4.4.6, 4.2.11, and 4.0.15
2014-10-14 00:00:00
[ MDVSA-2014:200 ] bugzilla
2014-11-03 00:00:00
Web applications security vulnerabilities summary &#40;PHP, ASP, JSP, CGI, Perl&#41;
2014-11-03 00:00:00
mageia
mageia
Updated bugzilla packages fix security vulnerabilities
2014-10-09 18:39:32
Updated ikiwiki packages fix security vulnerability
2019-03-15 19:56:09
gentoo
gentoo
Bugzilla: Multiple vulnerabilities
2016-07-20 00:00:00

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

7.2 High

AI Score

Confidence

High

0.012 Low

EPSS

Percentile

85.3%

JSON
Related for NVD:CVE-2016-9646
ubuntucve3prion3cvelist3debiancve2cve3freebsd3openvas12nessus14thn1checkpoint_advisories1nvd2debian2fedora5osv2securityvulns3mageia2gentoo1