Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2016-9646
HistoryApr 13, 2018 - 12:00 a.m.

CVE-2016-9646

2018-04-1300:00:00
ubuntu.com
ubuntu.com
16

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

EPSS

0.012

Percentile

85.3%

JSON

ikiwiki before 3.20161229 incorrectly called the CGI::FormBuilder->field
method (similar to the CGI->param API that led to Bugzilla’s
CVE-2014-1572), which can be abused to lead to commit metadata forgery.

OSVersionArchitecturePackageVersionFilename
ubuntu16.04noarchikiwiki< anyUNKNOWN

Related

nvd 3
cve 3
debiancve 2
prion 3
cvelist 3
nessus 14
freebsd 3
openvas 12
ubuntucve 2
checkpoint_advisories 1
thn 1
debian 2
osv 3
fedora 5
gentoo 1
mageia 2
securityvulns 3
nvd
nvd
CVE-2016-9646
2018-04-13 15:29:00
CVE-2014-1572
2014-10-13 01:55:06
CVE-2017-0356
2018-04-13 15:29:00
cve
cve
CVE-2016-9646
2018-04-13 15:29:00
CVE-2014-1572
2014-10-13 01:55:06
CVE-2017-0356
2018-04-13 15:29:00
debiancve
debiancve
CVE-2016-9646
2018-04-13 15:29:00
CVE-2017-0356
2018-04-13 15:29:00
prion
prion
Design/Logic Flaw
2018-04-13 15:29:00
Design/Logic Flaw
2014-10-13 01:55:00
Authentication flaw
2018-04-13 15:29:00
cvelist
cvelist
CVE-2016-9646 Commit metadata forgery via CGI::FormBuilder context-dependent APIs
2018-04-13 15:00:00
CVE-2014-1572
2014-10-13 01:00:00
CVE-2017-0356 Authentication bypass via repeated parameters
2018-04-13 15:00:00
nessus
nessus
FreeBSD : ikiwiki -- multiple vulnerabilities (5ed094a0-0150-11e7-ae1b-002590263bf5)
2017-03-06 00:00:00
FreeBSD : ikiwiki -- authentication bypass vulnerability (7b35a77a-0151-11e7-ae1b-002590263bf5)
2017-03-06 00:00:00
Fedora 25 : ikiwiki (2017-c756d37779)
2017-01-30 00:00:00
freebsd
freebsd
ikiwiki -- multiple vulnerabilities
2016-12-19 00:00:00
ikiwiki -- authentication bypass vulnerability
2017-01-11 00:00:00
Bugzilla multiple security issues
2014-10-06 00:00:00
openvas
openvas
IkiWiki Multiple Vulnerabilities
2018-04-18 00:00:00
IkiWiki Authentication Bypass Vulnerability
2018-04-18 00:00:00
Debian Security Advisory DSA 3760-1 (ikiwiki - security update)
2017-01-12 00:00:00
ubuntucve
ubuntucve
CVE-2014-1572
2014-10-13 00:00:00
CVE-2017-0356
2018-04-13 00:00:00
checkpoint_advisories
checkpoint_advisories
Bugzilla Privilege Escalation - Email Validation Bypass (CVE-2014-1572)
2014-10-02 00:00:00
thn
thn
Zero-Day in Bugzilla Exposes Zero-Day Vulnerabilities to Hackers
2014-10-06 22:37:00
debian
debian
[SECURITY] [DLA 812-1] ikiwiki security update
2017-01-31 20:28:50
[SECURITY] [DSA 3760-1] ikiwiki security update
2017-01-12 15:01:19
osv
osv
ikiwiki - security update
2017-01-12 00:00:00
ikiwiki - security update
2017-01-31 00:00:00
ikiwiki-3.20200202.3-2.7 on GA media
2024-06-15 00:00:00
fedora
fedora
[SECURITY] Fedora 24 Update: ikiwiki-3.20170111-1.fc24
2017-01-27 19:19:01
[SECURITY] Fedora 25 Update: ikiwiki-3.20170111-1.fc25
2017-01-27 19:22:10
[SECURITY] Fedora 21 Update: bugzilla-4.4.6-1.fc21
2014-11-01 17:10:00
gentoo
gentoo
Bugzilla: Multiple vulnerabilities
2016-07-20 00:00:00
mageia
mageia
Updated bugzilla packages fix security vulnerabilities
2014-10-09 18:39:32
Updated ikiwiki packages fix security vulnerability
2019-03-15 19:56:09
securityvulns
securityvulns
[ MDVSA-2014:200 ] bugzilla
2014-11-03 00:00:00
Security advisory for Bugzilla 4.5.6, 4.4.6, 4.2.11, and 4.0.15
2014-10-14 00:00:00
Web applications security vulnerabilities summary &#40;PHP, ASP, JSP, CGI, Perl&#41;
2014-11-03 00:00:00

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

EPSS

0.012

Percentile

85.3%

JSON
Related for UB:CVE-2016-9646
nvd3cve3debiancve2prion3cvelist3nessus14freebsd3openvas12ubuntucve2checkpoint_advisories1thn1debian2osv3fedora5gentoo1mageia2securityvulns3