CVE-2008-6109

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2008-6109
Robin Rawson-Tetley Animal Shelter Manager (ASM) before 2.2.2 does not properly enforce the privileges of user accounts, which allows local users to bypass intended access restrictions by (1) opening unspecified screens, related to the "double click selector bug"; or modifying a (2) animal, (3) owner, (4) lost/found, (5) diary note, (6) owner donation, or (7) waiting list record, related to "change permissions" and the "new UI."

4.6 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 3.9 / Impact : 6.4

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
http://secunia.com/advisories/30041 Vendor Advisory
http://sourceforge.net/project/shownotes.php?group_id=82533&release_id=596220
http://www.securityfocus.com/bid/29022
https://exchange.xforce.ibmcloud.com/vulnerabilities/42139
http://secunia.com/advisories/30041 Vendor Advisory
http://sourceforge.net/project/shownotes.php?group_id=82533&release_id=596220
http://www.securityfocus.com/bid/29022
https://exchange.xforce.ibmcloud.com/vulnerabilities/42139
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:shelter_manager:animal_shelter_manager:*:*:*:*:*:*:*:*
cpe:2.3:a:shelter_manager:animal_shelter_manager:1.1:*:*:*:*:*:*:*
cpe:2.3:a:shelter_manager:animal_shelter_manager:1.3:*:*:*:*:*:*:*
cpe:2.3:a:shelter_manager:animal_shelter_manager:1.11:*:*:*:*:*:*:*
cpe:2.3:a:shelter_manager:animal_shelter_manager:1.12:*:*:*:*:*:*:*
cpe:2.3:a:shelter_manager:animal_shelter_manager:1.20:*:*:*:*:*:*:*
cpe:2.3:a:shelter_manager:animal_shelter_manager:1.22:*:*:*:*:*:*:*
cpe:2.3:a:shelter_manager:animal_shelter_manager:1.30:*:*:*:*:*:*:*
cpe:2.3:a:shelter_manager:animal_shelter_manager:1.30.1:*:*:*:*:*:*:*
cpe:2.3:a:shelter_manager:animal_shelter_manager:1.30.2:*:*:*:*:*:*:*
cpe:2.3:a:shelter_manager:animal_shelter_manager:1.30_beta:*:*:*:*:*:*:*
cpe:2.3:a:shelter_manager:animal_shelter_manager:1.31:*:*:*:*:*:*:*
cpe:2.3:a:shelter_manager:animal_shelter_manager:1.32:*:*:*:*:*:*:*
cpe:2.3:a:shelter_manager:animal_shelter_manager:1.33:*:*:*:*:*:*:*
cpe:2.3:a:shelter_manager:animal_shelter_manager:1.34:*:*:*:*:*:*:*
cpe:2.3:a:shelter_manager:animal_shelter_manager:1.35:*:*:*:*:*:*:*
cpe:2.3:a:shelter_manager:animal_shelter_manager:1.36:*:*:*:*:*:*:*
cpe:2.3:a:shelter_manager:animal_shelter_manager:1.37:*:*:*:*:*:*:*
cpe:2.3:a:shelter_manager:animal_shelter_manager:1.38:*:*:*:*:*:*:*
cpe:2.3:a:shelter_manager:animal_shelter_manager:1.39:*:*:*:*:*:*:*
cpe:2.3:a:shelter_manager:animal_shelter_manager:1.40:*:*:*:*:*:*:*
cpe:2.3:a:shelter_manager:animal_shelter_manager:2.0.1:*:*:*:*:*:*:*
cpe:2.3:a:shelter_manager:animal_shelter_manager:2.0.2:*:*:*:*:*:*:*
cpe:2.3:a:shelter_manager:animal_shelter_manager:2.0.6:*:*:*:*:*:*:*
cpe:2.3:a:shelter_manager:animal_shelter_manager:2.0.8:*:*:*:*:*:*:*
cpe:2.3:a:shelter_manager:animal_shelter_manager:2.0.14:*:*:*:*:*:*:*
cpe:2.3:a:shelter_manager:animal_shelter_manager:2.0.15:*:*:*:*:*:*:*
cpe:2.3:a:shelter_manager:animal_shelter_manager:2.0.16:*:*:*:*:*:*:*
cpe:2.3:a:shelter_manager:animal_shelter_manager:2.0.17:*:*:*:*:*:*:*
cpe:2.3:a:shelter_manager:animal_shelter_manager:2.0.18:*:*:*:*:*:*:*
cpe:2.3:a:shelter_manager:animal_shelter_manager:2.0.21:*:*:*:*:*:*:*
cpe:2.3:a:shelter_manager:animal_shelter_manager:2.0.22:*:*:*:*:*:*:*
cpe:2.3:a:shelter_manager:animal_shelter_manager:2.1.0:*:*:*:*:*:*:*
cpe:2.3:a:shelter_manager:animal_shelter_manager:2.1.1:*:*:*:*:*:*:*
cpe:2.3:a:shelter_manager:animal_shelter_manager:2.2.0:*:*:*:*:*:*:*
History

21 Nov 2024, 00:55

Type Values Removed Values Added
References () http://secunia.com/advisories/30041 - Vendor Advisory () http://secunia.com/advisories/30041 - Vendor Advisory
References () http://sourceforge.net/project/shownotes.php?group_id=82533&release_id=596220 - () http://sourceforge.net/project/shownotes.php?group_id=82533&release_id=596220 -
References () http://www.securityfocus.com/bid/29022 - () http://www.securityfocus.com/bid/29022 -
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/42139 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/42139 -
Information

Published : 2009-02-11 00:30

Updated : 2024-11-21 00:55

NVD link : CVE-2008-6109

Mitre link : CVE-2008-6109

CVE.ORG link : CVE-2008-6109

JSON object : View

Products Affected

shelter_manager

  • animal_shelter_manager
CWE
CWE-264

Permissions, Privileges, and Access Controls