PT-2017-7930 · Apple · A-Blog Cms

Yuya Yoshida · Publicado 2017-04-12 · Atualizado 2017-04-20 · CVE-2016-1178

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions appleple a-blog cms versions 2.6.0.1 and earlier

Description The issue concerns the session management of the comment functionality, allowing remote attackers to obtain or modify sensitive data.

Recommendations For versions 2.6.0.1 and earlier, update to a version later than 2.6.0.1 to resolve the issue.

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

CVE-2016-1178

Produtos afetados

A-Blog Cms

Referências · 5

• https://developer.a-blogcms.jp/blog/patch/entry-2363.html · Nota
• https://osv.dev/vulnerability/CVE-2016-1178 · Aviso do Fabricante
• http://jvn.jp/en/jp/JVN03975805/index.html · Nota
• http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000047.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-1178 · Nota de Segurança