NVD

Id
7471  
Name
CVE-2011-0398  
Description
The Piwik_Common::getIP function in Piwik before 1.1 does not properly determine the client IP address, which allows remote attackers to bypass intended geolocation and logging functionality via (1) use of a private (aka RFC 1918) address behind a proxy server or (2) spoofing of the X-Forwarded-For HTTP header.  
Reject
 
CVSS Version
2  
CVSS Score
6.4  
Severity
Medium  
CVSS Base Score
6.4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-07  
Published
2011-01-10  
Modified Date
2011-01-19  
Seq
2011-0398  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
42030 7471 CVE-2011-0398 http://dev.piwik.org/trac/ticket/567  View
42031 7471 CVE-2011-0398 http://piwik.org/blog/2011/01/piwik-1-1-2/  View
42032 7471 CVE-2011-0398 45787  View
42033 7471 CVE-2011-0398 piwik-piwikcommongetip-security-bypass(64641)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
33855 JVNDB-2011-004097 Piwik の Piwik_Common::getIP 関数における位置情報取得とロギング機能を回避される脆弱性 Piwik の Piwik_Common::getIP 関数は、クライアント IP アドレスを適切に決定しないため、位置情報取得とロギング機能を回避される脆弱性が存在します。 CVE-2011-0398 48305 CVE-2011-0398 7471 6.4 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004097.html 2011-01-10 2012-03-27 View