Lucene search

[email protected]CVE-2009-2951

HistoryAug 24, 2009 - 3:30 p.m.

CVE-2009-2951

2009-08-2415:30:00

CWE-310

[email protected]

web.nvd.nist.gov

cve-2009-2951

phenotype cms

password encryption

vulnerability

nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.8 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

45.5%

JSON

Phenotype CMS before 2.9 does not use a random salt value for password encryption, which makes it easier for context-dependent attackers to determine cleartext passwords.

Affected configurations

NVD

Node

phenotype-cmsphenotype_cmsRange≤2.8

phenotype-cmsphenotype_cmsMatch1.0

phenotype-cmsphenotype_cmsMatch2.0

phenotype-cmsphenotype_cmsMatch2.1

phenotype-cmsphenotype_cmsMatch2.2

phenotype-cmsphenotype_cmsMatch2.3

phenotype-cmsphenotype_cmsMatch2.4

phenotype-cmsphenotype_cmsMatch2.5

phenotype-cmsphenotype_cmsMatch2.5.1

phenotype-cmsphenotype_cmsMatch2.6

phenotype-cmsphenotype_cmsMatch2.7

CPENameOperatorVersion
phenotype-cms:phenotype_cmsphenotype-cms phenotype cmsle2.8
phenotype-cms:phenotype_cmsphenotype-cms phenotype cmseq1.0
phenotype-cms:phenotype_cmsphenotype-cms phenotype cmseq2.0
phenotype-cms:phenotype_cmsphenotype-cms phenotype cmseq2.1
phenotype-cms:phenotype_cmsphenotype-cms phenotype cmseq2.2
phenotype-cms:phenotype_cmsphenotype-cms phenotype cmseq2.3
phenotype-cms:phenotype_cmsphenotype-cms phenotype cmseq2.4
phenotype-cms:phenotype_cmsphenotype-cms phenotype cmseq2.5
phenotype-cms:phenotype_cmsphenotype-cms phenotype cmseq2.5.1
phenotype-cms:phenotype_cmsphenotype-cms phenotype cmseq2.6

CPE	Name	Operator	Version
phenotype-cms:phenotype_cms	phenotype-cms phenotype cms	le	2.8
phenotype-cms:phenotype_cms	phenotype-cms phenotype cms	eq	1.0
phenotype-cms:phenotype_cms	phenotype-cms phenotype cms	eq	2.0
phenotype-cms:phenotype_cms	phenotype-cms phenotype cms	eq	2.1
phenotype-cms:phenotype_cms	phenotype-cms phenotype cms	eq	2.2
phenotype-cms:phenotype_cms	phenotype-cms phenotype cms	eq	2.3
phenotype-cms:phenotype_cms	phenotype-cms phenotype cms	eq	2.4
phenotype-cms:phenotype_cms	phenotype-cms phenotype cms	eq	2.5
phenotype-cms:phenotype_cms	phenotype-cms phenotype cms	eq	2.5.1
phenotype-cms:phenotype_cms	phenotype-cms phenotype cms	eq	2.6

Rows per page:

1-10 of 111

References

www.phenotype-cms.com/wiki/development-changelog

exchange.xforce.ibmcloud.com/vulnerabilities/52856

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.8 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

45.5%

JSON

Related for CVE-2009-2951

prion1 cvelist1 nvd1