Lucene search

K
cveMitreCVE-2010-2276
HistoryJun 15, 2010 - 2:30 p.m.

CVE-2010-2276

2010-06-1514:30:01
CWE-16
mitre
web.nvd.nist.gov
103
dojo
cve-2010-2276
build process
security vulnerability
remote attack

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.7

Confidence

Low

EPSS

0.02

Percentile

89.1%

The default configuration of the build process in Dojo 0.4.x before 0.4.4, 1.0.x before 1.0.3, 1.1.x before 1.1.2, 1.2.x before 1.2.4, 1.3.x before 1.3.3, and 1.4.x before 1.4.2 has the copyTests=true and mini=false options, which makes it easier for remote attackers to have an unspecified impact via a request to a (1) test or (2) demo component.

Affected configurations

Nvd
Node
dojotoolkitdojoMatch0.4.0
OR
dojotoolkitdojoMatch0.4.1
OR
dojotoolkitdojoMatch0.4.2
OR
dojotoolkitdojoMatch0.4.3
OR
dojotoolkitdojoMatch1.0
OR
dojotoolkitdojoMatch1.0.1
OR
dojotoolkitdojoMatch1.0.2
OR
dojotoolkitdojoMatch1.1
OR
dojotoolkitdojoMatch1.1.1
OR
dojotoolkitdojoMatch1.2
OR
dojotoolkitdojoMatch1.2.1
OR
dojotoolkitdojoMatch1.2.2
OR
dojotoolkitdojoMatch1.2.3
OR
dojotoolkitdojoMatch1.3
OR
dojotoolkitdojoMatch1.3.1
OR
dojotoolkitdojoMatch1.3.2
OR
dojotoolkitdojoMatch1.4
OR
dojotoolkitdojoMatch1.4.1
VendorProductVersionCPE
dojotoolkitdojo0.4.0cpe:2.3:a:dojotoolkit:dojo:0.4.0:*:*:*:*:*:*:*
dojotoolkitdojo0.4.1cpe:2.3:a:dojotoolkit:dojo:0.4.1:*:*:*:*:*:*:*
dojotoolkitdojo0.4.2cpe:2.3:a:dojotoolkit:dojo:0.4.2:*:*:*:*:*:*:*
dojotoolkitdojo0.4.3cpe:2.3:a:dojotoolkit:dojo:0.4.3:*:*:*:*:*:*:*
dojotoolkitdojo1.0cpe:2.3:a:dojotoolkit:dojo:1.0:*:*:*:*:*:*:*
dojotoolkitdojo1.0.1cpe:2.3:a:dojotoolkit:dojo:1.0.1:*:*:*:*:*:*:*
dojotoolkitdojo1.0.2cpe:2.3:a:dojotoolkit:dojo:1.0.2:*:*:*:*:*:*:*
dojotoolkitdojo1.1cpe:2.3:a:dojotoolkit:dojo:1.1:*:*:*:*:*:*:*
dojotoolkitdojo1.1.1cpe:2.3:a:dojotoolkit:dojo:1.1.1:*:*:*:*:*:*:*
dojotoolkitdojo1.2cpe:2.3:a:dojotoolkit:dojo:1.2:*:*:*:*:*:*:*
Rows per page:
1-10 of 181

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.7

Confidence

Low

EPSS

0.02

Percentile

89.1%