CVE-2010-0984
Published Mar 16, 2010
Last updated 7 years ago
Overview
- Description
- Acidcat CMS 3.5.3 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing credentials via a direct request for databases/acidcat_3.mdb.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 5
- Impact score
- 2.9
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
- nvd@nist.gov
- CWE-264
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:acidcat:acidcat_cms:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D4FBBE76-82FD-4E37-9502-FC2901F62B3A",
"versionEndIncluding": "3.5.3"
},
{
"criteria": "cpe:2.3:a:acidcat:acidcat_cms:2.1.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AB9B843A-A95A-4DB7-A2C6-6BCF86ABFD16"
},
{
"criteria": "cpe:2.3:a:acidcat:acidcat_cms:2.1.12:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FB0AD929-BA28-427E-A467-49B86DDAFC31"
},
{
"criteria": "cpe:2.3:a:acidcat:acidcat_cms:2.1.13:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DFDC2273-775B-499C-AD93-298C3ADA8AE6"
},
{
"criteria": "cpe:2.3:a:acidcat:acidcat_cms:3.3.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4A21A80F-25EF-4D51-9D38-CDE1C4833CF5"
},
{
"criteria": "cpe:2.3:a:acidcat:acidcat_cms:3.4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "905691B1-27B7-4F0C-ADDA-5CAD2B2A3A5E"
},
{
"criteria": "cpe:2.3:a:acidcat:acidcat_cms:3.4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B4836277-1552-4EB4-A4B9-EF645EDC1B0C"
},
{
"criteria": "cpe:2.3:a:acidcat:acidcat_cms:3.4.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "56D26FD3-E568-4F3F-AA25-F2E97DF53146"
},
{
"criteria": "cpe:2.3:a:acidcat:acidcat_cms:3.5.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "64D1AC55-4A21-44E9-AAB3-360F795DBCF3"
},
{
"criteria": "cpe:2.3:a:acidcat:acidcat_cms:3.5.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E1F5328F-D230-4CD9-AAAA-DBE924ED91EF"
},
{
"criteria": "cpe:2.3:a:acidcat:acidcat_cms:3.5.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "257D0C22-7893-489C-85F3-586D55265759"
}
],
"operator": "OR"
}
]
}
]