Lucene search

PRIOn knowledge basePRION:CVE-2012-5649

HistoryMay 23, 2014 - 2:55 p.m.

Design/Logic Flaw

2014-05-2314:55:00

PRIOn knowledge base

www.prio-n.com

8.1 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.058 Low

EPSS

Percentile

93.2%

JSON

Apache CouchDB before 1.0.4, 1.1.x before 1.1.2, and 1.2.x before 1.2.1 allows remote attackers to execute arbitrary code via a JSONP callback, related to Adobe Flash.

CPENameOperatorVersion
couchdbeq1.0.2
couchdbeq1.1.0
couchdbeq1.0.1
couchdbeq1.0.0
couchdbeq1.2.0
couchdble1.0.3
couchdbeq1.1.1

Name	Operator	Version
couchdb	eq	1.0.2
couchdb	eq	1.1.0
couchdb	eq	1.0.1
couchdb	eq	1.0.0
couchdb	eq	1.2.0
couchdb	le	1.0.3
couchdb	eq	1.1.1

References

archives.neohapsis.com/archives/bugtraq/2013-01/0057.html

secunia.com/advisories/51765

www.mandriva.com/security/advisories?name=MDVSA-2013:067

www.securityfocus.com/bid/57314

lists.fedoraproject.org/pipermail/package-announce/2013-February/098089.html

lists.fedoraproject.org/pipermail/package-announce/2013-February/098092.html

8.1 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.058 Low

EPSS

Percentile

93.2%

JSON

Related for PRION:CVE-2012-5649