Lucene search
HistoryMar 10, 2009 - 2:30 p.m.
CVE-2009-0864
cve
s-cms
authentication bypass
nvd
remote attackers
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.3 High
AI Score
Confidence
Low
0.006 Low
EPSS
Percentile
79.4%
S-Cms 1.1 Stable allows remote attackers to bypass authentication and obtain administrative access via an OK value for the login cookie.
Affected configurations
Node
matteoiammarrones-cmsMatch1.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| matteoiammarrone:s-cms | matteoiammarrone s-cms | eq | 1.1 |
Related
nvd
nvd
CVE-2009-0864
2009-03-10 14:30:00
prion
prion
Authentication flaw
2009-03-10 14:30:00
cvelist
cvelist
CVE-2009-0864
2009-03-10 14:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.3 High
AI Score
Confidence
Low
0.006 Low
EPSS
Percentile
79.4%
Related for CVE-2009-0864