PT-2015-6000 · Igreks · Milkystep Light+1

Kusano Kazuhiko · Publicado 2015-06-13 · Atualizado 2016-12-03 · CVE-2015-2952

NVD

CVSS v2.0

6.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:P

The user-information management functionality in Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote authenticated users to bypass intended access restrictions and modify administrative credentials via unspecified vectors, a different vulnerability than CVE-2015-2953 and CVE-2015-2958.

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

CVE-2015-2952

Produtos afetados

Milkystep Light

Milkystep Professional

Referências · 5

• http://jvndb.jvn.jp/jvndb/JVNDB-2015-000077 · Aviso do Fabricante
• http://jvn.jp/en/jp/JVN19732015/index.html · Aviso do Fabricante
• http://jvn.jp/en/jp/JVN19732015/995646/index.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-2952 · Nota de Segurança
• http://securityfocus.com/bid/75184 · Nota