Lucene search
JpcertCVE-2010-3925HistoryJan 13, 2011 - 7:00 p.m.
CVE-2010-3925
2011-01-1319:00:02
CWE-255
jpcert
web.nvd.nist.gov
22
contents-mall
security vulnerability
administrative password
remote attackers
sensitive information
data modification
CVSS2
5.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
AI Score
6.5
Confidence
Low
EPSS
0.006
Percentile
77.6%
Contents-Mall before 15 does not properly handle passwords, which allows remote attackers to discover the administrative password, and consequently obtain sensitive information or modify data, via unspecified vectors.
Affected configurations
Node
wb-icontents-mallRange≤14.00
| Vendor | Product | Version | CPE |
|---|---|---|---|
| wb-i | contents-mall | * | cpe:2.3:a:wb-i:contents-mall:*:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2010-3925
2011-01-13 18:35:00
prion
prion
Default credentials
2011-01-13 19:00:00
jvn
jvn
JVN#53293565: Contents-Mall vulnerability in password handling
2011-01-11 00:00:00
nvd
nvd
CVE-2010-3925
2011-01-13 19:00:02
CVSS2
5.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
AI Score
6.5
Confidence
Low
EPSS
0.006
Percentile
77.6%
Related for CVE-2010-3925