CVE-2008-0476

EPSS 0.3%
Veröffentlicht 29.01.2008 20:00:00
Zuletzt bearbeitet 09.04.2025 00:30:58
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

ManageEngine Applications Manager 8.1 build 8100 does not check authentication for monitorType.do and unspecified other pages, which allows remote attackers to obtain sensitive information and change settings via unspecified vectors.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 6

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Manageengine ≫ Applications Manager Version8.1_build_8100

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.3%	0.502

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	6.4	10	4.9	AV:N/AC:L/Au:N/C:P/I:P/A:N

CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

http://secunia.com/advisories/28332

Vendor Advisory

http://www.securityfocus.com/bid/27443

https://exchange.xforce.ibmcloud.com/vulnerabilities/39915

https://nvd.nist.gov/vuln/detail/CVE-2008-0476

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2008-0476

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2008-0476

EUVD