Lucene search

MitreCVE-2007-6006

HistoryNov 15, 2007 - 10:46 p.m.

CVE-2007-6006

2007-11-1522:46:00

CWE-287

mitre

web.nvd.nist.gov

testlink

cve-2007-6006

nvd

authorization mechanism

security vulnerability

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.7

Confidence

Low

EPSS

0.005

Percentile

75.4%

JSON

TestLink before 1.7.1 does not enforce an unspecified authorization mechanism, which has unknown impact and attack vectors.

Affected configurations

Nvd

Node

testlinktestlinkRange≤1.7.0

VendorProductVersionCPE
testlinktestlink*cpe:2.3:a:testlink:testlink:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
testlink	testlink	*	cpe:2.3:a:testlink:testlink::::::::

References

osvdb.org/42211

secunia.com/advisories/27600

sourceforge.net/project/shownotes.php?release_id=548619&group_id=90976

www.securityfocus.com/bid/26439

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.7

Confidence

Low

EPSS

0.005

Percentile

75.4%

JSON

Related for CVE-2007-6006