CVE-2007-5113

Published Sep 26, 2007

Last updated 6 years ago

Overview

Description: report.cgi in Google Urchin allows remote attackers to bypass authentication and obtain sensitive information (web server logs) via certain modified query parameters, as demonstrated using the profile, rid, prefs, n, vid, bd, ed, dt, and gtype parameters, a different vulnerability than CVE-2007-5112.
Source: cve@mitre.org
NVD status: Modified

Risk scores

CVSS 2.0

Type: Primary
Base score: 5
Impact score: 2.9
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:P/I:N/A:N

Weaknesses

nvd@nist.gov: CWE-287

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:roi_revolution:urchin:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A5A11BEC-F78B-4883-8D47-EFACD23C30A2",
            "versionEndIncluding": "5.7.03"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References