NVD

Id
86538  
Name
CVE-2017-9378  
Description
BigTree CMS through 4.2.18 does not prevent a user from deleting their own account. This could have security relevance because deletion was supposed to be an admin-only action, and the admin may have other tasks (such as data backups) to complete before a user is deleted.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:N/I:P/A:N)  
Pub Date
2017-06-12  
Published
2017-06-02  
Modified Date
2017-06-06  
Seq
2017-9378  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
420086 86538 CVE-2017-8085 http://www.exponentcms.org/news/patch-5-released-for-v2-4-1-to-fix-a-few-critical-issues  View
420087 86538 CVE-2017-8085 https://github.com/exponentcms/exponent-cms/commit/0b2241ff1c7d86376fa260c5d4c1714f6cef9c0f  View
420088 86538 CVE-2017-8085 https://github.com/exponentcms/exponent-cms/releases/tag/v2.4.1patch5  View
420089 86538 CVE-2017-8085 http://www.exponentcms.org/news/patch-5-released-for-v2-4-1-to-fix-a-few-critical-issues  View
420090 86538 CVE-2017-8085 https://github.com/exponentcms/exponent-cms/commit/0b2241ff1c7d86376fa260c5d4c1714f6cef9c0f  View
420091 86538 CVE-2017-8085 https://github.com/exponentcms/exponent-cms/releases/tag/v2.4.1patch5  View
423239 86538 CVE-2017-2533 https://support.apple.com/HT207797  View
423240 86538 CVE-2017-2533 https://support.apple.com/HT207797  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
68118 JVNDB-2017-004400 BigTree CMS におけるアクセス制御に関する脆弱性 BigTree CMS には、アクセス制御に関する脆弱性が存在します。 CVE-2017-9378 0 CVE-2017-9378 86538 4 6.5 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-004400.html 2017-05-26 2017-06-23 View