PT-2017-7930 · Apple · A-Blog Cms

Yuya Yoshida · Published 2017-04-12 · Updated 2017-04-20 · CVE-2016-1178

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions appleple a-blog cms versions 2.6.0.1 and earlier

Description The issue concerns the session management of the comment functionality, allowing remote attackers to obtain or modify sensitive data.

Recommendations For versions 2.6.0.1 and earlier, update to a version later than 2.6.0.1 to resolve the issue.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2016-1178

Affected Products

A-Blog Cms

References · 5

• https://osv.dev/vulnerability/CVE-2016-1178 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-1178 · Security Note
• https://developer.a-blogcms.jp/blog/patch/entry-2363.html · Note
• http://jvn.jp/en/jp/JVN03975805/index.html · Note
• http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000047.html · Note