PT-2009-1635 · Sioc · Sioc

Publicado 2009-02-18 · Atualizado 2017-08-17 · CVE-2008-6160

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions SIOC versions 5.x before 5.x-1.2 SIOC versions 6.x before 6.x-1.1

Description The issue allows remote attackers to obtain usernames and read hashed emails and comments. This is due to the improper implementation of menu and database APIs.

Recommendations For SIOC versions 5.x before 5.x-1.2, update to version 5.x-1.2 or later. For SIOC versions 6.x before 6.x-1.1, update to version 6.x-1.1 or later.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2008-6160

Produtos afetados

Sioc

Referências · 5

• https://exchange.xforce.ibmcloud.com/vulnerabilities/45762 · Nota
• http://drupal.org/node/318749 · Aviso do Fabricante
• http://securityfocus.com/bid/31658 · Nota
• http://secunia.com/advisories/32191 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2008-6160 · Nota de Segurança