NVD

Id
24908  
Name
CVE-2015-2959  
Description
Zoho NetFlow Analyzer build 10250 and earlier does not check for administrative authorization, which allows remote attackers to obtain sensitive information, modify passwords, or remove accounts by leveraging the guest role.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-06-08  
Modified Date
2016-12-30  
Seq
2015-2959  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
131399 24908 CVE-2015-2959 JVN#25598413  View
131400 24908 CVE-2015-2959 JVNDB-2015-000075  View
131401 24908 CVE-2015-2959 75065  View
131402 24908 CVE-2015-2959 1032516  View
131403 24908 CVE-2015-2959 https://support.zoho.com/portal/manageengine/helpcenter/articles/vulnerability-fix-for-fails-to-restrict-access-permissions-cross-site-scripting-cross-site-request-forgery-over-build-10250  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
5563 JVNDB-2015-000075 NetFlow Analyzer におけるアクセス制限不備の脆弱性 Zoho Corporation が提供する NetFlow Analyzer には、アクセス制限不備の脆弱性が存在します。 CVE-2015-2959 80184 CVE-2015-2959 24908 5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-000075.html 2015-06-05 2015-06-10 View