Lucene search

K
ubuntucveUbuntu.comUB:CVE-2008-6547
HistoryMar 30, 2009 - 12:00 a.m.

CVE-2008-6547

2009-03-3000:00:00
ubuntu.com
ubuntu.com
9

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.008

Percentile

81.3%

schema.py in FormEncode for Python (python-formencode) 1.0 does not apply
the chained_validators feature, which allows attackers to bypass intended
access restrictions via unknown vectors.

Notes

Author Note
mdeslaur Debian says Vulnerable code was introduced in 1.0

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.008

Percentile

81.3%