PT-2009-5774 · Joomla · Icrm Basic

Publicado 2009-09-30 · Atualizado 2009-10-01 · CVE-2009-3481

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions com icrmbasic version 1.4.2.31

Description A certain interface in the iCRM Basic component for Joomla does not require administrative authentication. This issue has unspecified impact and can be exploited remotely.

Recommendations For version 1.4.2.31, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2009-3481

Produtos afetados

Icrm Basic

Referências · 4

• http://secunia.com/advisories/36892 · Aviso do Fabricante
• http://securityfocus.com/bid/36533 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-3481 · Nota de Segurança
• http://osvdb.org/58382 · Nota