CVE-2017-1000139 - Vulnerability Details

Vendors	Products
Mahara	Mahara

Link	Providers
https://bugs.launchpad.net/mahara/+bug/1397736

Show plain JSON

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "dateAssigned": "2017-08-22T00:00:00", "datePublic": "2017-11-03T00:00:00", "descriptions": [{"lang": "en", "value": "Mahara 1.8 before 1.8.7 and 1.9 before 1.9.5 and 1.10 before 1.10.3 and 15.04 before 15.04.0 are vulnerable to server-side request forgery attacks as not all processes of curl redirects are checked against a white or black list. Employing SafeCurl will prevent issues."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-11-03T17:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://bugs.launchpad.net/mahara/+bug/1397736"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "DATE_ASSIGNED": "2017-08-22T17:29:33.351027", "ID": "CVE-2017-1000139", "REQUESTER": "info@mahara.org", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Mahara 1.8 before 1.8.7 and 1.9 before 1.9.5 and 1.10 before 1.10.3 and 15.04 before 15.04.0 are vulnerable to server-side request forgery attacks as not all processes of curl redirects are checked against a white or black list. Employing SafeCurl will prevent issues."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "https://bugs.launchpad.net/mahara/+bug/1397736", "refsource": "MISC", "url": "https://bugs.launchpad.net/mahara/+bug/1397736"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T21:53:07.213Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://bugs.launchpad.net/mahara/+bug/1397736"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2017-1000139", "datePublished": "2017-11-03T18:00:00", "dateReserved": "2017-11-02T00:00:00", "dateUpdated": "2024-08-05T21:53:07.213Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

product : n/a (string)

vendor : n/a (string)

versions : [ »

0 : { »

status : affected (string)

version : n/a (string)

}

]

}

]

dateAssigned : 2017-08-22T00:00:00 (string)

datePublic : 2017-11-03T00:00:00 (string)

descriptions : [ »

0 : { »

lang : en (string)

value : Mahara 1.8 before 1.8.7 and 1.9 before 1.9.5 and 1.10 before 1.10.3 and 15.04 before 15.04.0 are vulnerable to server-side request forgery attacks as not all processes of curl redirects are checked against a white or black list. Employing SafeCurl will prevent issues. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

description : n/a (string)

lang : en (string)

type : text (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2017-11-03T17:57:01 (string)

orgId : 8254265b-2729-46b6-b9e3-3dfca2d5bfca (string)

shortName : mitre (string)

}

references : [ »

0 : { »

tags : [ »

0 : x_refsource_MISC (string)

]

url : https://bugs.launchpad.net/mahara/+bug/1397736 (string)

}

]

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : cve@mitre.org (string)

DATE_ASSIGNED : 2017-08-22T17:29:33.351027 (string)

ID : CVE-2017-1000139 (string)

REQUESTER : info@mahara.org (string)

STATE : PUBLIC (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : n/a (string)

version : { »

version_data : [ »

0 : { »

version_value : n/a (string)

}

]

}

]

}

vendor_name : n/a (string)

}

]

}

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : Mahara 1.8 before 1.8.7 and 1.9 before 1.9.5 and 1.10 before 1.10.3 and 15.04 before 15.04.0 are vulnerable to server-side request forgery attacks as not all processes of curl redirects are checked against a white or black list. Employing SafeCurl will prevent issues. (string)

}

]

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : n/a (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : https://bugs.launchpad.net/mahara/+bug/1397736 (string)

refsource : MISC (string)

url : https://bugs.launchpad.net/mahara/+bug/1397736 (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-05T21:53:07.213Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

tags : [ »

0 : x_refsource_MISC (string)

1 : x_transferred (string)

]

url : https://bugs.launchpad.net/mahara/+bug/1397736 (string)

}

]

}

]

}

cveMetadata : { »

assignerOrgId : 8254265b-2729-46b6-b9e3-3dfca2d5bfca (string)

assignerShortName : mitre (string)

cveId : CVE-2017-1000139 (string)

datePublished : 2017-11-03T18:00:00 (string)

dateReserved : 2017-11-02T00:00:00 (string)

dateUpdated : 2024-08-05T21:53:07.213Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:mahara:mahara:1.8:rc1:*:*:*:*:*:*", "matchCriteriaId": "46815EDD-C3F1-4B87-AC7F-9CCB9DDFF5AD", "vulnerable": true}, {"criteria": "cpe:2.3:a:mahara:mahara:1.8:rc2:*:*:*:*:*:*", "matchCriteriaId": "7A2E3A2C-80F5-477E-BAC3-8217A71A367B", "vulnerable": true}, {"criteria": "cpe:2.3:a:mahara:mahara:1.8.0:*:*:*:*:*:*:*", "matchCriteriaId": "795681EE-1AE9-4451-9C65-7EDF39D8D92A", "vulnerable": true}, {"criteria": "cpe:2.3:a:mahara:mahara:1.8.1:*:*:*:*:*:*:*", "matchCriteriaId": "4F877AEB-A0F7-48D6-9094-09F12709D6AA", "vulnerable": true}, {"criteria": "cpe:2.3:a:mahara:mahara:1.8.2:*:*:*:*:*:*:*", "matchCriteriaId": "37164355-787F-43A0-A9BD-F4E56762940F", "vulnerable": true}, {"criteria": "cpe:2.3:a:mahara:mahara:1.8.3:*:*:*:*:*:*:*", "matchCriteriaId": "FD0EE103-8CDB-43CF-975F-A07762F0E958", "vulnerable": true}, {"criteria": "cpe:2.3:a:mahara:mahara:1.8.4:*:*:*:*:*:*:*", "matchCriteriaId": "7BD8ADD1-C3AE-47DE-9FE2-48094ABDE3FF", "vulnerable": true}, {"criteria": "cpe:2.3:a:mahara:mahara:1.8.5:*:*:*:*:*:*:*", "matchCriteriaId": "871F1DFC-3977-4C6A-80AA-7E4131678215", "vulnerable": true}, {"criteria": "cpe:2.3:a:mahara:mahara:1.8.6:*:*:*:*:*:*:*", "matchCriteriaId": "EE9C9686-29B7-4212-9BAD-E04FE0EB8B02", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:mahara:mahara:1.9:rc1:*:*:*:*:*:*", "matchCriteriaId": "9375A9FA-C9B9-4406-937E-1FE1EC1EC3EC", "vulnerable": true}, {"criteria": "cpe:2.3:a:mahara:mahara:1.9.0:*:*:*:*:*:*:*", "matchCriteriaId": "03B93CE4-1D7F-49AF-AC56-8DFF01609099", "vulnerable": true}, {"criteria": "cpe:2.3:a:mahara:mahara:1.9.1:*:*:*:*:*:*:*", "matchCriteriaId": "89FE6330-10AD-4B30-AF0A-71635AB99B3F", "vulnerable": true}, {"criteria": "cpe:2.3:a:mahara:mahara:1.9.2:*:*:*:*:*:*:*", "matchCriteriaId": "A5F4BFE6-A72F-4FAB-B975-EF1878767595", "vulnerable": true}, {"criteria": "cpe:2.3:a:mahara:mahara:1.9.3:*:*:*:*:*:*:*", "matchCriteriaId": "8D937990-6958-4CD6-B976-E23C20567559", "vulnerable": true}, {"criteria": "cpe:2.3:a:mahara:mahara:1.9.4:*:*:*:*:*:*:*", "matchCriteriaId": "A3852023-B803-418C-BA1D-9545C9FDC44B", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:mahara:mahara:1.10:rc1:*:*:*:*:*:*", "matchCriteriaId": "1AF92381-863A-4D44-84B3-6116B15A6FD8", "vulnerable": true}, {"criteria": "cpe:2.3:a:mahara:mahara:1.10.0:*:*:*:*:*:*:*", "matchCriteriaId": "5EDFBD79-ECF1-4AB2-8AA9-93E001AF5749", "vulnerable": true}, {"criteria": "cpe:2.3:a:mahara:mahara:1.10.1:*:*:*:*:*:*:*", "matchCriteriaId": "23092107-1709-43B2-AC94-3A53474CBEFB", "vulnerable": true}, {"criteria": "cpe:2.3:a:mahara:mahara:1.10.2:*:*:*:*:*:*:*", "matchCriteriaId": "D5925E46-8A92-4A67-A8F6-7DF05C34BB55", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:mahara:mahara:15.04:rc1:*:*:*:*:*:*", "matchCriteriaId": "DCE2F6EE-06BE-4665-BA7B-AB6C97DAE02D", "vulnerable": true}, {"criteria": "cpe:2.3:a:mahara:mahara:15.04:rc2:*:*:*:*:*:*", "matchCriteriaId": "313A5DDA-204F-4ED3-BE22-FA0D8A239BC7", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Mahara 1.8 before 1.8.7 and 1.9 before 1.9.5 and 1.10 before 1.10.3 and 15.04 before 15.04.0 are vulnerable to server-side request forgery attacks as not all processes of curl redirects are checked against a white or black list. Employing SafeCurl will prevent issues."}, {"lang": "es", "value": "Mahara, en versiones 1.8 anteriores a la 1.8.7, versiones 1.9 anteriores a la 1.9.5, versiones 1.10 anteriores a la 1.10.3 y versiones 15.04 anteriores a la 15.04.0, es vulnerable a ataques de Server-Side Request Forgery debido a que no se verifican con una lista blanca o lista negra todos los procesos de redirecci\u00f3n curl. El uso de SafeCurl previene estos problemas."}], "id": "CVE-2017-1000139", "lastModified": "2025-04-20T01:37:25.860", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 6.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:S/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 6.8, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "version": "3.0"}, "exploitabilityScore": 2.1, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2017-11-03T18:29:00.480", "references": [{"source": "cve@mitre.org", "tags": ["Issue Tracking", "Patch", "Third Party Advisory"], "url": "https://bugs.launchpad.net/mahara/+bug/1397736"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Issue Tracking", "Patch", "Third Party Advisory"], "url": "https://bugs.launchpad.net/mahara/+bug/1397736"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-918"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:mahara:mahara:1.8:rc1:*:*:*:*:*:* (string)

matchCriteriaId : 46815EDD-C3F1-4B87-AC7F-9CCB9DDFF5AD (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:mahara:mahara:1.8:rc2:*:*:*:*:*:* (string)

matchCriteriaId : 7A2E3A2C-80F5-477E-BAC3-8217A71A367B (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:mahara:mahara:1.8.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 795681EE-1AE9-4451-9C65-7EDF39D8D92A (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:mahara:mahara:1.8.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 4F877AEB-A0F7-48D6-9094-09F12709D6AA (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:mahara:mahara:1.8.2:*:*:*:*:*:*:* (string)

matchCriteriaId : 37164355-787F-43A0-A9BD-F4E56762940F (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:mahara:mahara:1.8.3:*:*:*:*:*:*:* (string)

matchCriteriaId : FD0EE103-8CDB-43CF-975F-A07762F0E958 (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:mahara:mahara:1.8.4:*:*:*:*:*:*:* (string)

matchCriteriaId : 7BD8ADD1-C3AE-47DE-9FE2-48094ABDE3FF (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:a:mahara:mahara:1.8.5:*:*:*:*:*:*:* (string)

matchCriteriaId : 871F1DFC-3977-4C6A-80AA-7E4131678215 (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:a:mahara:mahara:1.8.6:*:*:*:*:*:*:* (string)

matchCriteriaId : EE9C9686-29B7-4212-9BAD-E04FE0EB8B02 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

1 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:mahara:mahara:1.9:rc1:*:*:*:*:*:* (string)

matchCriteriaId : 9375A9FA-C9B9-4406-937E-1FE1EC1EC3EC (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:mahara:mahara:1.9.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 03B93CE4-1D7F-49AF-AC56-8DFF01609099 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:mahara:mahara:1.9.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 89FE6330-10AD-4B30-AF0A-71635AB99B3F (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:mahara:mahara:1.9.2:*:*:*:*:*:*:* (string)

matchCriteriaId : A5F4BFE6-A72F-4FAB-B975-EF1878767595 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:mahara:mahara:1.9.3:*:*:*:*:*:*:* (string)

matchCriteriaId : 8D937990-6958-4CD6-B976-E23C20567559 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:mahara:mahara:1.9.4:*:*:*:*:*:*:* (string)

matchCriteriaId : A3852023-B803-418C-BA1D-9545C9FDC44B (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

2 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:mahara:mahara:1.10:rc1:*:*:*:*:*:* (string)

matchCriteriaId : 1AF92381-863A-4D44-84B3-6116B15A6FD8 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:mahara:mahara:1.10.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 5EDFBD79-ECF1-4AB2-8AA9-93E001AF5749 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:mahara:mahara:1.10.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 23092107-1709-43B2-AC94-3A53474CBEFB (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:mahara:mahara:1.10.2:*:*:*:*:*:*:* (string)

matchCriteriaId : D5925E46-8A92-4A67-A8F6-7DF05C34BB55 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

3 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:mahara:mahara:15.04:rc1:*:*:*:*:*:* (string)

matchCriteriaId : DCE2F6EE-06BE-4665-BA7B-AB6C97DAE02D (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:mahara:mahara:15.04:rc2:*:*:*:*:*:* (string)

matchCriteriaId : 313A5DDA-204F-4ED3-BE22-FA0D8A239BC7 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : Mahara 1.8 before 1.8.7 and 1.9 before 1.9.5 and 1.10 before 1.10.3 and 15.04 before 15.04.0 are vulnerable to server-side request forgery attacks as not all processes of curl redirects are checked against a white or black list. Employing SafeCurl will prevent issues. (string)

}

1 : { »

lang : es (string)

value : Mahara, en versiones 1.8 anteriores a la 1.8.7, versiones 1.9 anteriores a la 1.9.5, versiones 1.10 anteriores a la 1.10.3 y versiones 15.04 anteriores a la 15.04.0, es vulnerable a ataques de Server-Side Request Forgery debido a que no se verifican con una lista blanca o lista negra todos los procesos de redirección curl. El uso de SafeCurl previene estos problemas. (string)

}

]

id : CVE-2017-1000139 (string)

lastModified : 2025-04-20T01:37:25.860 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : false (boolean)

baseSeverity : MEDIUM (string)

cvssData : { »

accessComplexity : MEDIUM (string)

accessVector : NETWORK (string)

authentication : SINGLE (string)

availabilityImpact : PARTIAL (string)

baseScore : 6 (number)

confidentialityImpact : PARTIAL (string)

integrityImpact : PARTIAL (string)

vectorString : AV:N/AC:M/Au:S/C:P/I:P/A:P (string)

version : 2.0 (string)

}

exploitabilityScore : 6.8 (number)

impactScore : 6.4 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : true (boolean)

}

]

cvssMetricV30 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 8 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : REQUIRED (string)

vectorString : CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H (string)

version : 3.0 (string)

}

exploitabilityScore : 2.1 (number)

impactScore : 5.9 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2017-11-03T18:29:00.480 (string)

references : [ »

0 : { »

source : cve@mitre.org (string)

tags : [ »

0 : Issue Tracking (string)

1 : Patch (string)

2 : Third Party Advisory (string)

]

url : https://bugs.launchpad.net/mahara/+bug/1397736 (string)

}

1 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Issue Tracking (string)

1 : Patch (string)

2 : Third Party Advisory (string)

]

url : https://bugs.launchpad.net/mahara/+bug/1397736 (string)

}

]

sourceIdentifier : cve@mitre.org (string)

vulnStatus : Deferred (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-918 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

Access Vector Network

Access Complexity Medium

Authentication Single

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

Access Vector Network

Access Complexity Medium

Authentication Single

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object