CVE-2008-7217

{"id": "CVE-2008-7217", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.6, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2009-09-13T22:30:00.327", "references": [{"url": "http://osvdb.org/44959", "source": "cve@mitre.org"}, {"url": "http://support.microsoft.com/default.aspx?scid=kb%3BEN-US%3B948488", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-264"}]}], "descriptions": [{"lang": "en", "value": "Microsoft Office 2008 for Mac, when running on Macintosh systems that restrict Office access to administrators, does not enforce this restriction for user ID 502, which allows local users with that ID to bypass intended security policy and access Office programs, related to permissions and ownership for certain directories."}, {"lang": "es", "value": "Microsoft Office 2008 para Mac, cuando se ejecuta en sistemas Macintosh que restringen el acceso a Office para administradores, no hacen cumplir esta restricci\u00f3n para el usuario ID 502, esto permite a usuarios locales con ese ID evitar las pol\u00edticas de seguridad pretendidas y acceder a los programas Office. Est\u00e1 relacionado con los permisos y propietarios de ciertos directorios."}], "lastModified": "2023-11-07T02:03:29.027", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:microsoft:office:2008:*:mac:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5BA91840-371C-4282-9F7F-B393F785D260"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}