NVD

Id
5840  
Name
CVE-2008-6109  
Description
Robin Rawson-Tetley Animal Shelter Manager (ASM) before 2.2.2 does not properly enforce the privileges of user accounts, which allows local users to bypass intended access restrictions by (1) opening unspecified screens, related to the "double click selector bug"; or modifying a (2) animal, (3) owner, (4) lost/found, (5) diary note, (6) owner donation, or (7) waiting list record, related to "change permissions" and the "new UI."  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2009-02-10  
Modified Date
2009-02-12  
Seq
2008-6109  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
35579 5840 CVE-2008-6109 http://sourceforge.net/project/shownotes.php?group_id=82533&release_id=596220  View
35580 5840 CVE-2008-6109 29022  View
35581 5840 CVE-2008-6109 asm-unspecified-security-bypass(42139)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
44369 JVNDB-2009-005376 Robin Rawson-Tetley ASM におけるアクセス制限を回避される脆弱性 Robin Rawson-Tetley Animal Shelter Manager (ASM) は、ユーザアカウント権限を適切に強制しないため、アクセス制限を回避される脆弱性が存在します。 CVE-2008-6109 36222 CVE-2008-6109 5840 4.6 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005376.html 2009-02-10 2012-12-20 View