Lucene search

[email protected]CVE-2007-6500

HistoryDec 20, 2007 - 8:46 p.m.

CVE-2007-6500

2007-12-2020:46:00

CWE-264

[email protected]

web.nvd.nist.gov

vulnerability

hosting controller

remote

authenticated

delete

gateway information

openapi

gatewayvariables.asp

4.9 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:P/A:N

6.2 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

72.7%

JSON

Unspecified vulnerability in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to delete “gateway information” via a request to OpenApi/GatewayVariables.asp.

Affected configurations

NVD

Node

hosting_controllerhosting_controllerRange≤6.1_hotfix_3.3

CPENameOperatorVersion
hosting_controller:hosting_controllerhosting controllerle6.1_hotfix_3.3

CPE	Name	Operator	Version
hosting_controller:hosting_controller	hosting controller	le	6.1_hotfix_3.3

References

hostingcontroller.com/english/logs/Post-Hotfix-3_3-sec-Patch-ReleaseNotes.html

osvdb.org/44185

secunia.com/advisories/28973

securityreason.com/securityalert/3474

securitytracker.com/id?1019222

www.securityfocus.com/archive/1/485028/100/0/threaded

www.securityfocus.com/bid/26862

exchange.xforce.ibmcloud.com/vulnerabilities/39038

www.exploit-db.com/exploits/4730

4.9 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:P/A:N

6.2 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

72.7%

JSON

Related for CVE-2007-6500

nvd1 prion1 cvelist1