5.8

CVE-2008-5809

futomi CGI Cafe Access Analyzer CGI Standard 4.0.1 and earlier and Access Analyzer CGI Professional 4.11.3 and earlier use a predictable session id, which makes it easier for remote attackers to hijack sessions, and obtain sensitive information about analysis results, via a modified id.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Futomi ≫ Access Analyzer Cgi Edition std Version <= 4.0.1
Futomi ≫ Access Analyzer Cgi Version _nil_ Update beta1 Edition pro
Futomi ≫ Access Analyzer Cgi Version _nil_ Update beta2 Edition pro
Futomi ≫ Access Analyzer Cgi Version 1.0 Edition pro
Futomi ≫ Access Analyzer Cgi Version 1.1 Edition pro
Futomi ≫ Access Analyzer Cgi Version 1.1 Edition std
Futomi ≫ Access Analyzer Cgi Version 1.2 Edition pro
Futomi ≫ Access Analyzer Cgi Version 1.2 Edition std
Futomi ≫ Access Analyzer Cgi Version 1.3 Edition pro
Futomi ≫ Access Analyzer Cgi Version 1.3 Edition std
Futomi ≫ Access Analyzer Cgi Version 1.4 Edition pro
Futomi ≫ Access Analyzer Cgi Version 1.4 Edition std
Futomi ≫ Access Analyzer Cgi Version 1.5 Edition pro
Futomi ≫ Access Analyzer Cgi Version 1.6 Edition pro
Futomi ≫ Access Analyzer Cgi Version 1.7 Edition pro
Futomi ≫ Access Analyzer Cgi Version 2.0 Edition pro
Futomi ≫ Access Analyzer Cgi Version 2.0 Edition std
Futomi ≫ Access Analyzer Cgi Version 2.1 Edition pro
Futomi ≫ Access Analyzer Cgi Version 2.1 Edition std
Futomi ≫ Access Analyzer Cgi Version 2.2 Edition pro
Futomi ≫ Access Analyzer Cgi Version 2.2 Edition std
Futomi ≫ Access Analyzer Cgi Version 2.3 Edition pro
Futomi ≫ Access Analyzer Cgi Version 2.3 Edition std
Futomi ≫ Access Analyzer Cgi Version 2.4 Edition pro
Futomi ≫ Access Analyzer Cgi Version 2.4 Edition std
Futomi ≫ Access Analyzer Cgi Version 3.0 Edition pro
Futomi ≫ Access Analyzer Cgi Version 3.0 Edition std
Futomi ≫ Access Analyzer Cgi Version 3.1 Edition pro
Futomi ≫ Access Analyzer Cgi Version 3.1 Edition std
Futomi ≫ Access Analyzer Cgi Version 3.2 Edition pro
Futomi ≫ Access Analyzer Cgi Version 3.2 Edition std
Futomi ≫ Access Analyzer Cgi Version 3.3 Edition pro
Futomi ≫ Access Analyzer Cgi Version 3.3 Edition std
Futomi ≫ Access Analyzer Cgi Version 3.4 Edition pro
Futomi ≫ Access Analyzer Cgi Version 3.4 Edition std
Futomi ≫ Access Analyzer Cgi Version 3.5 Edition pro
Futomi ≫ Access Analyzer Cgi Version 3.5 Edition std
Futomi ≫ Access Analyzer Cgi Version 3.6 Edition std
Futomi ≫ Access Analyzer Cgi Version 3.7 Edition std
Futomi ≫ Access Analyzer Cgi Version 3.8 Edition std
Futomi ≫ Access Analyzer Cgi Version 3.8.1 Edition std
Futomi ≫ Access Analyzer Cgi Version 4.0 Edition pro
Futomi ≫ Access Analyzer Cgi Version 4.0.0 Edition std
Futomi ≫ Access Analyzer Cgi Version 4.1 Edition pro
Futomi ≫ Access Analyzer Cgi Version 4.2 Edition pro
Futomi ≫ Access Analyzer Cgi Version 4.3 Edition pro
Futomi ≫ Access Analyzer Cgi Version 4.4 Edition pro
Futomi ≫ Access Analyzer Cgi Version 4.5 Edition pro
Futomi ≫ Access Analyzer Cgi Version 4.6 Edition pro
Futomi ≫ Access Analyzer Cgi Version 4.7 Edition pro
Futomi ≫ Access Analyzer Cgi Version 4.8 Edition pro
Futomi ≫ Access Analyzer Cgi Version 4.9 Edition pro
Futomi ≫ Access Analyzer Cgi Version 4.10 Edition pro
Futomi ≫ Access Analyzer Cgi Version 4.10.1 Edition pro
Futomi ≫ Access Analyzer Cgi Version 4.10.2 Edition pro
Futomi ≫ Access Analyzer Cgi Version 4.10.3 Edition pro
Futomi ≫ Access Analyzer Cgi Version 4.10.4 Edition pro
Futomi ≫ Access Analyzer Cgi Version 4.10.5 Edition pro
Futomi ≫ Access Analyzer Cgi Version 4.11.0 Edition pro
Futomi ≫ Access Analyzer Cgi Version 4.11.1 Edition pro
Futomi ≫ Access Analyzer Cgi Version 4.11.2 Edition pro
Futomi ≫ Access Analyzer Cgi Version 4.11.3 Edition pro
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.01% 0.586
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.8 8.6 4.9
AV:N/AC:M/Au:N/C:P/I:P/A:N
CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

http://jvn.jp/en/jp/JVN07468800/index.html
http://jvndb.jvn.jp/en/contents/2008/JVNDB-2008-000083.html
http://www.futomi.com/library/info/2008/20081212.html
Vendor Advisory
http://www.securityfocus.com/bid/32794