NVD

Id
10231  
Name
CVE-2011-3645  
Description
Newgen OmniDocs allows remote attackers to bypass intended access restrictions via (1) a modified FolderRights parameter to doccab/doclist.jsp, which leads to arbitrary permission changes; or (2) a modified UserIndex parameter to doccab/userprofile/editprofile.jsp, which selects the settings page of an arbitrary user.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2011-09-27  
Modified Date
2012-02-13  
Seq
2011-3645  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
58567 10231 CVE-2011-3645 20110926 [CVE-2011-3645] Multiple vulnerability in "Omnidocs"  View
58568 10231 CVE-2011-3645 8394  View
58569 10231 CVE-2011-3645 17897  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
32053 JVNDB-2011-002293 Newgen OmniDocs におけるアクセス制限を回避される脆弱性 Newgen OmniDocs には、アクセス制限を回避される脆弱性が存在します。 CVE-2011-3645 51552 CVE-2011-3645 10231 7.5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002293.html 2011-09-27 2011-10-03 View