CVE-2007-2637

2007-05-1323:19:00

mitre

web.nvd.nist.gov

moinmoin

cve-2007-2637

security

acls

remote attackers

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.3

Confidence

Low

EPSS

0.009

Percentile

82.9%

JSON

MoinMoin before 20070507 does not properly enforce ACLs for calendars and includes, which allows remote attackers to read certain pages via unspecified vectors.

Affected configurations

Nvd

Node

ubuntuubuntu_linuxMatch6.06_lts

ubuntuubuntu_linuxMatch6.10

ubuntuubuntu_linuxMatch7.04

AND

moinmoinmoinmoinRange≤1.5.7

VendorProductVersionCPE
ubuntuubuntu_linux6.06_ltscpe:2.3:o:ubuntu:ubuntu_linux:6.06_lts:*:*:*:*:*:*:*
ubuntuubuntu_linux6.10cpe:2.3:o:ubuntu:ubuntu_linux:6.10:*:*:*:*:*:*:*
ubuntuubuntu_linux7.04cpe:2.3:o:ubuntu:ubuntu_linux:7.04:*:*:*:*:*:*:*
moinmoinmoinmoin*cpe:2.3:a:moinmoin:moinmoin:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ubuntu	ubuntu_linux	6.06_lts	cpe:2.3:o:ubuntu:ubuntu_linux:6.06_lts:::::::*
ubuntu	ubuntu_linux	6.10	cpe:2.3:o:ubuntu:ubuntu_linux:6.10:::::::*
ubuntu	ubuntu_linux	7.04	cpe:2.3:o:ubuntu:ubuntu_linux:7.04:::::::*
moinmoin	moinmoin	*	cpe:2.3:a:moinmoin:moinmoin::::::::