CVE-2012-1031

Published Feb 8, 2012

Last updated 13 years ago

Overview

Description: Unspecified vulnerability in EPiServer CMS 5 and 6 through 6R2, in certain configurations using Forms Authentication, allows remote authenticated users to obtain WebAdmins access by leveraging Edit Mode privileges, a different vulnerability than CVE-2011-3416 and CVE-2011-3417.
Source: cve@mitre.org
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 6
Impact score: 6.4
Exploitability score: 6.8
Vector string: AV:N/AC:M/Au:S/C:P/I:P/A:P

Weaknesses

nvd@nist.gov: NVD-CWE-noinfo

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:episerver:episerver_cms:5.1.422.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "BA4708D8-7D1D-45A2-B8AB-37D3C9FDE8DB"
          },
          {
            "criteria": "cpe:2.3:a:episerver:episerver_cms:5.1.422.122:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A3A9EECC-992F-407B-B0FB-F3B4F13BA375"
          },
          {
            "criteria": "cpe:2.3:a:episerver:episerver_cms:5.1.422.256:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F91AA207-464D-433D-8075-4E05DF5E63D5"
          },
          {
            "criteria": "cpe:2.3:a:episerver:episerver_cms:5.1.422.267:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "EFCAEBA3-D8F7-4964-9A43-73FDF31A7006"
          },
          {
            "criteria": "cpe:2.3:a:episerver:episerver_cms:5.2.375.7:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "AC249D83-8293-45CD-815B-3D953B02CF0C"
          },
          {
            "criteria": "cpe:2.3:a:episerver:episerver_cms:5.2.375.133:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B8F88DC9-64AE-4896-BC6F-FB30C9B942D3"
          },
          {
            "criteria": "cpe:2.3:a:episerver:episerver_cms:5.2.375.236:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "2F8E49CA-CC2C-42A8-862E-E0A8AEDB332B"
          },
          {
            "criteria": "cpe:2.3:a:episerver:episerver_cms:6.0.530.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F9504F8E-CB51-4914-A850-3076083A6BFD"
          },
          {
            "criteria": "cpe:2.3:a:episerver:episerver_cms:6.1.379.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "AE869BD5-0238-4829-B5C6-FECE1A5709DC"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References