PT-2007-4062 · Plain Black · Webgui

Publicado 2007-05-17 · Atualizado 2011-03-08 · CVE-2007-2746

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Baixa

Vetor base

AV:N/AC:M/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions WebGUI versions prior to 7.3.14

Description The issue is related to the viewList function in lib/WebGUI/Asset/Wobject/DataForm.pm, which does not properly utilize data structures containing privilege information. This allows remote authenticated users to potentially obtain sensitive information or have other unspecified impact.

Recommendations For versions prior to 7.3.14, update to version 7.3.14 or later to resolve the issue.

Exploit

Correção

Identificadores relacionados

CVE-2007-2746

Produtos afetados

Webgui

Referências · 5

• 🔥 http://plainblack.com/bugs/tracker/dataform-security-bug · Exploit
• http://secunia.com/advisories/25355 · Nota
• http://osvdb.org/36566 · Nota
• http://vupen.com/english/advisories/2007/1840 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-2746 · Nota de Segurança