PT-2010-3293 · Phpbb · Phpbb

Naderman + 1 · Publicado 2010-05-19 · Atualizado 2010-05-20 · CVE-2010-1627

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions phpBB version 3.0.7

Description The issue allows remote attackers to bypass intended access restrictions. This is due to improper permission checking for feeds in the feed.php file. The attack vectors are related to permission settings on a private forum.

Recommendations For phpBB version 3.0.7, update to version 3.0.7-PL1 to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2010-1627

Produtos afetados

Phpbb

Referências · 5

• http://openwall.com/lists/oss-security/2010/05/18/6 · Nota
• http://phpbb.com/community/viewtopic.php?f=14&t=2014195 · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2010/05/16/1 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1627 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-1627 · Nota de Segurança