NVD

Id
23552  
Name
CVE-2015-1173  
Description
Unit4 Polska TETA Web (formerly TETA Galactica) 22.62.3.4 does not properly restrict access to the (1) Design Mode and (2) Debug Logger mode modules, which allows remote attackers to gain privileges via crafted "received parameters."  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-09-16  
Modified Date
2015-09-17  
Seq
2015-1173  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
124811 23552 CVE-2015-1173 http://packetstormsecurity.com/files/133147/UNIT4TETA-TETA-WEB-22.62.3.4-Authorization-Bypass.html  View
124812 23552 CVE-2015-1173 20150818 UNIT4TETA TETA WEB - Authorization Bypass vulnerability  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
9404 JVNDB-2015-004724 Unit4 Polska TETA Web における権限を取得される脆弱性 Unit4 Polska TETA Web (旧 TETA Galactica) は、(1) Design Mode および (2) Debug Logger モードのモジュールへのアクセスを適切に制限しないため、権限を取得される脆弱性が存在します。 CVE-2015-1173 78398 CVE-2015-1173 23552 7.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-004724.html 2015-01-08 2015-09-18 View