PT-2023-10236 · Little Apps · Little Apps Little Software Stats

Published 2023-01-16 · Updated 2024-05-17 · CVE-2015-10057

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:A/AC:H/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Little Apps Little Software Stats versions prior to 0.2

Description A critical issue was found in the Password Reset Handler component, specifically in the file inc/class.securelogin.php, leading to improper access controls. The complexity of an attack is rather high, and exploitation appears to be difficult.

Recommendations For versions prior to 0.2, upgrade to version 0.2 to address this issue. As a temporary workaround, consider restricting access to the Password Reset Handler component until the upgrade is applied.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2015-10057

Affected Products

Little Apps Little Software Stats

References · 7

• https://github.com/little-apps/little-software-stats/releases/tag/v0.2 · Patch
• https://github.com/little-apps/little-software-stats/commit/07ba8273a9311d1383f3686ac7cb32f20770ab1e · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2015-10057 · Security Note
• https://t.me/cvenotify/42116 · Telegram Post
• https://vuldb.com/?ctiid.218401 · Note
• https://t.me/cvenotify/59778 · Telegram Post
• https://vuldb.com/?id.218401 · Note