Lucene search
Ubuntu.comUB:CVE-2012-0215HistoryJul 12, 2012 - 12:00 a.m.
CVE-2012-0215
2012-07-1200:00:00
ubuntu.com
ubuntu.com
9
5.5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:N/I:P/A:P
0.003 Low
EPSS
Percentile
67.8%
model/modelstorage.py in the Tryton application framework (trytond) before
2.4.0 for Python does not properly restrict access to the Many2Many field
in the relation model, which allows remote authenticated users to modify
the privileges of arbitrary users via a (1) create, (2) write, (3) delete,
or (4) copy rpc call.
Bugs
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 11.04 | noarch | tryton-server | <ย 1.6.1-2+squeeze1build0.11.04.1 | UNKNOWN |
Related
openvas
openvas
Fedora Update for trytond FEDORA-2012-4963
2012-04-11 00:00:00
Fedora Update for trytond FEDORA-2012-4923
2012-08-30 00:00:00
Fedora Update for trytond FEDORA-2012-4923
2012-08-30 00:00:00
nessus
nessus
Fedora 15 : trytond-1.8.6-1.fc15 (2012-4988)
2012-04-09 00:00:00
Debian DSA-2444-1 : tryton-server - privilege escalation
2012-03-30 00:00:00
Fedora 16 : trytond-2.0.4-1.fc16 (2012-4963)
2012-04-09 00:00:00
fedora
fedora
[SECURITY] Fedora 17 Update: trytond-2.2.2-1.fc17
2012-04-12 03:33:05
[SECURITY] Fedora 15 Update: trytond-1.8.6-1.fc15
2012-04-08 03:32:36
[SECURITY] Fedora 16 Update: trytond-2.0.4-1.fc16
2012-04-08 03:29:12
prion
prion
Code injection
2012-07-12 20:55:00
securityvulns
securityvulns
[SECURITY] [DSA 2444-1] tryton-server security update
2012-04-09 00:00:00
debiancve
debiancve
CVE-2012-0215
2012-07-12 20:55:00
seebug
seebug
Python 'trytond'ๆจกๅ'Many2Many'ๅญๆฎตๅฎๅ
จ้ๅถ็ป่ฟๆผๆด
2012-03-30 00:00:00
osv
osv
PYSEC-2012-6
2012-07-12 20:55:00
Trytond allows modification of privileges of arbitrary users
2022-05-04 00:28:50
cve
cve
CVE-2012-0215
2012-07-12 20:55:00
debian
debian
[SECURITY] [DSA 2444-1] tryton-server security update
2012-03-29 06:06:23
github
github
Trytond allows modification of privileges of arbitrary users
2022-05-04 00:28:50
5.5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:N/I:P/A:P
0.003 Low
EPSS
Percentile
67.8%
Related for UB:CVE-2012-0215