Lucene search

PRIOn knowledge basePRION:CVE-2007-3907

HistoryJul 19, 2007 - 5:30 p.m.

Authentication flaw

2007-07-1917:30:00

PRIOn knowledge base

www.prio-n.com

7.5 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.022 Low

EPSS

Percentile

89.3%

JSON

Unspecified vulnerability in login.pl in LedgerSMB 1.2.0 through 1.2.6 allows remote attackers to bypass authentication and perform certain actions as an arbitrary user via unspecified vectors involving a URL with a redirect parameter value, along with a callback parameter containing an escaped URL that specifies the action.

CPENameOperatorVersion
ledgersmbeq1.2.3
ledgersmbeq1.2.5
ledgersmbeq1.2.2
ledgersmbeq1.2.6
ledgersmbeq1.2.0
ledgersmbeq1.2.1
ledgersmbeq1.2.4

Name	Operator	Version
ledgersmb	eq	1.2.3
ledgersmb	eq	1.2.5
ledgersmb	eq	1.2.2
ledgersmb	eq	1.2.6
ledgersmb	eq	1.2.0
ledgersmb	eq	1.2.1
ledgersmb	eq	1.2.4

References

secunia.com/advisories/26121

sourceforge.net/project/shownotes.php?release_id=523576&group_id=175965

www.ledgersmb.org/node/52

www.securityfocus.com/archive/1/473987/100/0/threaded

www.securityfocus.com/archive/1/473993/100/0/threaded

www.securityfocus.com/bid/24940

www.vupen.com/english/advisories/2007/2576

exchange.xforce.ibmcloud.com/vulnerabilities/35507

7.5 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.022 Low

EPSS

Percentile

89.3%

JSON

Related for PRION:CVE-2007-3907

cve1