Lucene search

MitreCVE-2008-5853

HistoryJan 06, 2009 - 5:30 p.m.

CVE-2008-5853

2009-01-0617:30:00

CWE-264

mitre

web.nvd.nist.gov

chicomas

information security

access control

database credentials

cve-2008-5853

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.5

Confidence

Low

EPSS

0.005

Percentile

76.8%

JSON

Chilek Content Management System (aka ChiCoMaS) 2.0.4 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to (1) obtain database credentials via a direct request for config.inc or (2) read database backups via a request for a backup/ URI.

Affected configurations

Nvd

Node

chicomaschicomasRange≤2.0.4

chicomaschicomasMatch2.0.3

VendorProductVersionCPE
chicomaschicomas*cpe:2.3:a:chicomas:chicomas:*:*:*:*:*:*:*:*
chicomaschicomas2.0.3cpe:2.3:a:chicomas:chicomas:2.0.3:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
chicomas	chicomas	*	cpe:2.3:a:chicomas:chicomas::::::::
chicomas	chicomas	2.0.3	cpe:2.3:a:chicomas:chicomas:2.0.3:::::::*

References

secunia.com/advisories/30080

securityreason.com/securityalert/4872

www.bugreport.ir/index_59.htm

www.securityfocus.com/archive/1/499458/100/0/threaded

www.exploit-db.com/exploits/7532

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.5

Confidence

Low

EPSS

0.005

Percentile

76.8%

JSON

Related for CVE-2008-5853