Vulnerability CVE-2015-2952

Vulnerability CVE-2015-2952

Published: 2015-06-13

Description:

The user-information management functionality in Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote authenticated users to bypass intended access restrictions and modify administrative credentials via unspecified vectors, a different vulnerability than CVE-2015-2953 and CVE-2015-2958.

CVSS2 => (AV:N/AC:L/Au:S/C:P/I:P/A:P)

CVSS Base Score	Impact Subscore	Exploitability Subscore
6.5/10	6.4/10	8/10

Exploit range	Attack complexity	Authentication
Remote	Low	Single time
Confidentiality impact	Integrity impact	Availability impact
Partial	Partial	Partial

Affected software
Igreks -> Milkystep light
Igreks -> Milkystep professional
Igreks -> Milkystep professional oem

References:

http://jvn.jp/en/jp/JVN19732015/995646/index.html

http://jvn.jp/en/jp/JVN19732015/index.html

http://jvndb.jvn.jp/jvndb/JVNDB-2015-000077

http://www.securityfocus.com/bid/75184

Copyright 2024, cxsecurity.com