Lucene search

K
nvd[email protected]NVD:CVE-2008-6298
HistoryFeb 26, 2009 - 4:17 p.m.

CVE-2008-6298

2009-02-2616:17:19
CWE-20
web.nvd.nist.gov
1

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

6.7

Confidence

Low

EPSS

0.006

Percentile

79.3%

Unspecified vulnerability in sISAPILocation before 1.0.2.2 allows remote attackers to bypass intended access restrictions for character encoding and the cookie secure flag via unknown vectors related to the “HTTP header rewrite function.”

Affected configurations

Nvd
Node
rocketeer.dipsisapilocationRange1.0.2.0
OR
rocketeer.dipsisapilocationMatch1.0.1.3
OR
rocketeer.dipsisapilocationMatch1.0.1.4
VendorProductVersionCPE
rocketeer.dipsisapilocation*cpe:2.3:a:rocketeer.dip:sisapilocation:*:*:*:*:*:*:*:*
rocketeer.dipsisapilocation1.0.1.3cpe:2.3:a:rocketeer.dip:sisapilocation:1.0.1.3:*:*:*:*:*:*:*
rocketeer.dipsisapilocation1.0.1.4cpe:2.3:a:rocketeer.dip:sisapilocation:1.0.1.4:*:*:*:*:*:*:*

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

6.7

Confidence

Low

EPSS

0.006

Percentile

79.3%

Related for NVD:CVE-2008-6298