NVD

Id
1873  
Name
CVE-2008-1937  
Description
The user form processing (userform.py) in MoinMoin before 1.6.3, when using ACLs or a non-empty superusers list, does not properly manage users, which allows remote attackers to gain privileges.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-04-25  
Modified Date
2011-03-07  
Seq
2008-1937  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
12102 1873 CVE-2008-1937 http://hg.moinmo.in/moin/1.6/rev/f405012e67af  View
12103 1873 CVE-2008-1937 http://moinmo.in/SecurityFixes  View
12104 1873 CVE-2008-1937 GLSA-200805-09  View
12105 1873 CVE-2008-1937 28869  View
12106 1873 CVE-2008-1937 ADV-2008-1307  View
12107 1873 CVE-2008-1937 moinmoin-userform-security-bypass(41909)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
49060 JVNDB-2008-004370 MoinMoin の userform.py における権限を取得される脆弱性 MoinMoin の user form processing (userform.py) は、ACL または空白でない superusers リストを使用している際ユーザを適切に管理しないため、権限を取得される脆弱性が存在します。 CVE-2008-1937 32050 CVE-2008-1937 1873 6.8 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004370.html 2008-04-20 2012-09-25 View