Lucene search

K
cveMitreCVE-2015-2821
HistoryApr 01, 2015 - 2:59 p.m.

CVE-2015-2821

2015-04-0114:59:19
CWE-264
mitre
web.nvd.nist.gov
19
cve-2015-2821
typo3 neos
remote editors
content modification
security vulnerability

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

AI Score

6.8

Confidence

Low

EPSS

0.001

Percentile

40.8%

TYPO3 Neos 1.1.x before 1.1.3 and 1.2.x before 1.2.3 allows remote editors to access, create, and modify content nodes in the workspace of other editors via unspecified vectors.

Affected configurations

Nvd
Node
typo3neosMatch1.1.0
OR
typo3neosMatch1.1.1
OR
typo3neosMatch1.1.2
OR
typo3neosMatch1.2.0
OR
typo3neosMatch1.2.1
OR
typo3neosMatch1.2.2
VendorProductVersionCPE
typo3neos1.1.0cpe:2.3:a:typo3:neos:1.1.0:*:*:*:*:*:*:*
typo3neos1.1.1cpe:2.3:a:typo3:neos:1.1.1:*:*:*:*:*:*:*
typo3neos1.1.2cpe:2.3:a:typo3:neos:1.1.2:*:*:*:*:*:*:*
typo3neos1.2.0cpe:2.3:a:typo3:neos:1.2.0:*:*:*:*:*:*:*
typo3neos1.2.1cpe:2.3:a:typo3:neos:1.2.1:*:*:*:*:*:*:*
typo3neos1.2.2cpe:2.3:a:typo3:neos:1.2.2:*:*:*:*:*:*:*

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

AI Score

6.8

Confidence

Low

EPSS

0.001

Percentile

40.8%

Related for CVE-2015-2821