PT-2023-10212 · Unknown · Jvvlee Merlinsboard

Jvvlee · Published 2023-01-09 · Updated 2024-05-17 · CVE-2015-10033

Positive Technologies (AI Summary)

CVSS v2.0

3.7

Low

Base vector

AV:A/AC:L/Au:M/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions jvvlee MerlinsBoard (affected versions not specified)

Description A vulnerability was found in the Grade Handler component of jvvlee MerlinsBoard, leading to improper authorization. The manipulation of an unknown part of this component is the cause of the issue. No information is provided about the estimated number of potentially affected devices or real-world incidents where this issue was exploited.

Recommendations To fix this issue, it is recommended to apply a patch. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authorization

Incorrect Authorization

Weakness Enumeration

CWE-285

CWE-863

Related Identifiers

CVE-2015-10033

Affected Products

Jvvlee Merlinsboard

References · 6

• https://github.com/jvvlee/MerlinsBoard/commit/134f5481e2914b7f096cd92a22b1e6bcb8e6dfe5 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2015-10033 · Security Note
• https://t.me/cvenotify/41956 · Telegram Post
• https://vuldb.com/?id.217713 · Note
• https://vuldb.com/?ctiid.217713 · Note
• https://t.me/cibsecurity/56179 · Telegram Post