NVD

Id
52128  
Name
CVE-2009-5014  
Description
The default quickstart configuration of TurboGears2 (aka tg2) before 2.0.2 has a weak cookie salt, which makes it easier for remote attackers to bypass repoze.who authentication via a forged authorization cookie, a related issue to CVE-2010-3852.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2010-11-05  
Modified Date
2010-11-09  
Seq
2009-5014  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
263176 52128 CVE-2009-5014 [turbogears-announce] 20090811 Critical security update for tg2 users!  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
37130 JVNDB-2010-002915 TurboGears2 のデフォルトのクイックスタートの設定における repoze.who 認証を回避される脆弱性 TurboGears2 のデフォルトのクイックスタートの設定は、脆弱なクッキーソルトを含むため、repoze.who 認証を回避される脆弱性が存在します。 CVE-2009-5014 42445 CVE-2009-5014 52128 7.5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002915.html 2010-11-05 2012-03-27 View