CVE-2015-1173

Published Sep 16, 2015

Last updated 9 years ago

Overview

Description: Unit4 Polska TETA Web (formerly TETA Galactica) 22.62.3.4 does not properly restrict access to the (1) Design Mode and (2) Debug Logger mode modules, which allows remote attackers to gain privileges via crafted "received parameters."
Source: cve@mitre.org
NVD status: Analyzed

Risk scores

CVSS 2.0

Type: Primary
Base score: 7.5
Impact score: 6.4
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:P/I:P/A:P

Weaknesses

nvd@nist.gov: CWE-284

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:unit4:teta_web:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1C435B9F-FF37-43C9-812B-9B13CC4B4449",
            "versionEndIncluding": "22.62.3.4"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References