CVE-2009-4109

Published Nov 29, 2009

Last updated 15 years ago

Overview

Description: The install wizard in DotNetNuke 4.0 through 5.1.4 does not prevent anonymous users from accessing functionality related to determination of the need for an upgrade, which allows remote attackers to access version information and possibly other sensitive information.
Source: cve@mitre.org
NVD status: Analyzed

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 5
Impact score: 2.9
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:P/I:N/A:N

Weaknesses

nvd@nist.gov: CWE-200

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:dotnetnuke:dotnetnuke:4.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "31D0AA24-9FA3-4AFD-920A-295898473918"
          },
          {
            "criteria": "cpe:2.3:a:dotnetnuke:dotnetnuke:4.3.5:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "34AF4B04-B86C-4BD0-94D9-3157AC55E542"
          },
          {
            "criteria": "cpe:2.3:a:dotnetnuke:dotnetnuke:4.4.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "6FB3D130-5DC4-4FE6-B178-EF1638E3A43D"
          },
          {
            "criteria": "cpe:2.3:a:dotnetnuke:dotnetnuke:4.5.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "68F28416-0ABF-4B2F-87A4-C4EC4D0CA227"
          },
          {
            "criteria": "cpe:2.3:a:dotnetnuke:dotnetnuke:4.5.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F1681BA4-9C05-45DF-B51B-D89633EB0C70"
          },
          {
            "criteria": "cpe:2.3:a:dotnetnuke:dotnetnuke:4.5.5:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "884BA1BF-BD03-4437-A02C-825B59634A76"
          },
          {
            "criteria": "cpe:2.3:a:dotnetnuke:dotnetnuke:4.6.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C627743E-9B8B-431B-A513-89CBF7C1E742"
          },
          {
            "criteria": "cpe:2.3:a:dotnetnuke:dotnetnuke:4.6.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "677B54A1-6945-459F-9ADA-D6D9E89F2436"
          },
          {
            "criteria": "cpe:2.3:a:dotnetnuke:dotnetnuke:4.6.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E6D101EF-4506-45D8-9717-5EE9A99B0A43"
          },
          {
            "criteria": "cpe:2.3:a:dotnetnuke:dotnetnuke:4.7.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C7059E6A-4A54-4364-8977-400C18905D01"
          },
          {
            "criteria": "cpe:2.3:a:dotnetnuke:dotnetnuke:4.8.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "92A018EB-3C16-44BB-A872-E80D6F165395"
          },
          {
            "criteria": "cpe:2.3:a:dotnetnuke:dotnetnuke:4.8.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1285FF8E-EDB0-4C50-815B-DE40B1786601"
          },
          {
            "criteria": "cpe:2.3:a:dotnetnuke:dotnetnuke:4.8.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "625C6564-F098-4C9B-AFE7-6686275A1016"
          },
          {
            "criteria": "cpe:2.3:a:dotnetnuke:dotnetnuke:4.8.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "6293D07D-4C07-4A5D-9532-455A7D5AA6BA"
          },
          {
            "criteria": "cpe:2.3:a:dotnetnuke:dotnetnuke:4.8.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "250EE0BC-F79D-40D0-A185-8307F82DA8BF"
          },
          {
            "criteria": "cpe:2.3:a:dotnetnuke:dotnetnuke:4.9:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "2902A37C-97AA-42CD-A038-3DA1A6E4653A"
          },
          {
            "criteria": "cpe:2.3:a:dotnetnuke:dotnetnuke:4.9.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "403D90A9-C191-496A-BBB9-4915D39B675D"
          },
          {
            "criteria": "cpe:2.3:a:dotnetnuke:dotnetnuke:4.9.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "6B40DA1D-12CF-4DFF-9364-D60A53ED898D"
          },
          {
            "criteria": "cpe:2.3:a:dotnetnuke:dotnetnuke:5.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "102921DE-5513-4BCB-8383-D22A78C59735"
          },
          {
            "criteria": "cpe:2.3:a:dotnetnuke:dotnetnuke:5.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7DC26BE5-265B-455A-83AE-E289A0C79B3F"
          },
          {
            "criteria": "cpe:2.3:a:dotnetnuke:dotnetnuke:5.1.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "DFAD2896-6A9C-4953-8074-E689F359C900"
          },
          {
            "criteria": "cpe:2.3:a:dotnetnuke:dotnetnuke:5.1.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "74B90994-F7F0-4BC9-99E4-E798B98899AD"
          },
          {
            "criteria": "cpe:2.3:a:dotnetnuke:dotnetnuke:5.1.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "9A6FB531-44C1-4EA1-B69D-0D591673D7C2"
          },
          {
            "criteria": "cpe:2.3:a:dotnetnuke:dotnetnuke:5.1.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "2B3A0857-2E5D-4BCD-AAE6-D50FCAE6FF67"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References