PT-2008-4898 · Mpfm · Mpfm

Publicado 2008-08-06 · Atualizado 2017-08-08 · CVE-2008-3504

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions mPFM versions prior to 2.3

Description The issue concerns an unspecified vulnerability related to the manipulation of cookies, allowing for remote attack vectors.

Recommendations For versions prior to 2.3, update to version 2.3 or later to resolve the issue.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2008-3504

Produtos afetados

Mpfm

Referências · 5

• http://secunia.com/advisories/30833 · Aviso do Fabricante
• http://sourceforge.net/project/shownotes.php?release_id=608915 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-3504 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43333 · Nota
• http://securityfocus.com/bid/29926 · Nota