6.8

CVE-2008-2134

The Journal module in Tru-Zone Nuke ET 3.x allows remote attackers to obtain access to arbitrary user accounts, and alter or delete data, via a modified username in an unspecified cookie.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Tru-zone ≫ Nukeet Version3.0
Tru-zone ≫ Nukeet Version3.1
Tru-zone ≫ Nukeet Version3.2
Tru-zone ≫ Nukeet Version3.3
Tru-zone ≫ Nukeet Version3.4
Tru-zone ≫ Nukeet Version3.9
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.2% 0.642
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://secunia.com/advisories/30061
Vendor Advisory
http://www.mrzayas.es/2008/05/04/multiples-vulnerabilidades-en-nuket-3x/
http://www.securityfocus.com/bid/29080
Patch
http://truzone.org/modules.php?name=Forums&file=viewtopic&p=332746
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/42239