PT-2023-10236 · Little Apps · Little Apps Little Software Stats

CVE-2015-10057 · Publicado 2023-01-16 · Atualizado 2024-05-17

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Média

Vetor base

AV:A/AC:H/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Little Apps Little Software Stats versions prior to 0.2

Description A critical issue was found in the Password Reset Handler component, specifically in the file inc/class.securelogin.php, leading to improper access controls. The complexity of an attack is rather high, and exploitation appears to be difficult.

Recommendations For versions prior to 0.2, upgrade to version 0.2 to address this issue. As a temporary workaround, consider restricting access to the Password Reset Handler component until the upgrade is applied.

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

CVE-2015-10057

Produtos afetados

Little Apps Little Software Stats

Referências · 7

• https://github.com/little-apps/little-software-stats/releases/tag/v0.2 · Correção
• https://github.com/little-apps/little-software-stats/commit/07ba8273a9311d1383f3686ac7cb32f20770ab1e · Correção
• https://t.me/cvenotify/42116 · Publicação no Telegram
• https://vuldb.com/?ctiid.218401 · Nota
• https://t.me/cvenotify/59778 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2015-10057 · Nota de Segurança
• https://vuldb.com/?id.218401 · Nota