Lucene search

K
osvGoogleOSV:GHSA-4VRC-Q7M6-VQ7W
HistoryNov 10, 2022 - 12:01 p.m.

Lin CMS vulnerable to Improper Authentication

2022-11-1012:01:09
Google
osv.dev
7
lin-cms
v0.2.1
authentication bypass
privilege escalation
super administrator
software

CVSS3

6.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

41.1%

An authentication bypass in Lin-CMS v0.2.1 allows attackers to escalate privileges to Super Administrator.

CVSS3

6.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

41.1%

Related for OSV:GHSA-4VRC-Q7M6-VQ7W