CVE

Id
38490  
CVE No.
CVE-2009-1055  
Status
Candidate  
Description
Unspecified vulnerability in the web service in Sitecore CMS 5.3.1 rev. 071114 allows remote authenticated users to gain access to security databases, and obtain administrative and user credentials, via unknown vectors related to SOAP and XML requests.  
Phase
Assigned (20090324)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
420056 38490 CVE-2009-1055 BUGTRAQ:20090317 Sitecore .NET 5.3.x - web service information disclosure  View
420057 38490 CVE-2009-1055 URL:http://www.securityfocus.com/archive/1/archive/1/501929/100/0/threaded  View
420058 38490 CVE-2009-1055 CONFIRM:http://sdn5.sitecore.net/Products/Sitecore%20V5/Sitecore%20CMS%205,-d-,3/ReleaseNotes/V5,-d-,3,-d-,2/ChangeLog.aspx  View
420059 38490 CVE-2009-1055 BID:34162  View
420060 38490 CVE-2009-1055 URL:http://www.securityfocus.com/bid/34162  View
420061 38490 CVE-2009-1055 SECUNIA:34356  View
420062 38490 CVE-2009-1055 URL:http://secunia.com/advisories/34356  View
420063 38490 CVE-2009-1055 VUPEN:ADV-2009-0753  View
420064 38490 CVE-2009-1055 URL:http://www.vupen.com/english/advisories/2009/0753  View
420065 38490 CVE-2009-1055 XF:sitecore-web-service-info-disclosure(49298)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
44897 JVNDB-2009-005904 Trident PowerZip におけるスタックベースのバッファオーバーフローの脆弱性 Trident PowerZip には、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2009-1059 38490 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005904.html  View