PT-2007-6864 · Orangehrm · Orangehrm

Published 2007-11-10 · Updated 2017-07-29 · CVE-2007-5931

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions OrangeHRM versions prior to 2.2.2

Description The issue concerns the reDirect function in lib/controllers/RepViewController.php, which fails to verify user privileges. This allows remote attackers to access data through unspecified vectors.

Recommendations For versions prior to 2.2.2, update to version 2.2.2 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive data until the update is applied.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2007-5931

Affected Products

Orangehrm

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2007-5931 · Security Note
• http://sourceforge.net/project/shownotes.php?release_id=550550&group_id=156477 · Patch
• http://securityfocus.com/bid/26351 · Patch
• http://osvdb.org/45295 · Note
• http://vupen.com/english/advisories/2007/3719 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5931 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/38245 · Note