Lucene search
HistoryJun 08, 2009 - 7:30 p.m.
CVE-2009-2003
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.3
Confidence
Low
EPSS
0.011
Percentile
84.3%
Ascad Networks Password Protector SD 1.3.1 allows remote attackers to bypass authentication and gain administrative access by setting the (1) c7portal and (2) cookname cookies to “admin.”
Affected configurations
Node
ascadnetworkspassword_protector_sdMatch1.3.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ascadnetworks | password_protector_sd | 1.3.1 | cpe:2.3:a:ascadnetworks:password_protector_sd:1.3.1:*:*:*:*:*:*:* |
Related
prion
prion
Authentication flaw
2009-06-08 19:30:00
cve
cve
CVE-2009-2003
2009-06-08 19:30:00
cvelist
cvelist
CVE-2009-2003
2009-06-08 19:00:00
exploitdb
exploitdb
Password Protector SD 1.3.1 - Insecure Cookie Handling
2009-05-13 00:00:00
Ascad Networks 5 - Products Insecure Cookie Handling
2009-05-14 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.3
Confidence
Low
EPSS
0.011
Percentile
84.3%
Related for NVD:CVE-2009-2003