CVE-2008-6603

2009-04-0318:30:00

CWE-264

mitre

web.nvd.nist.gov

cve-2008-6603

moinmoin

acl

bypass

remote attackers

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

6.5

Confidence

Low

EPSS

0.019

Percentile

88.4%

JSON

MoinMoin 1.6.2 and 1.7 does not properly enforce ACL checks when acl_hierarchic is set to True, which might allow remote attackers to bypass intended access restrictions, a different vulnerability than CVE-2008-1937.

Affected configurations

Nvd

Node

moinmomoinmoinMatch1.6.2

moinmomoinmoinMatch1.7.0

VendorProductVersionCPE
moinmomoinmoin1.6.2cpe:2.3:a:moinmo:moinmoin:1.6.2:*:*:*:*:*:*:*
moinmomoinmoin1.7.0cpe:2.3:a:moinmo:moinmoin:1.7.0:*:*:*:*:*:*:*