2 lines
3.0 KiB
JSON
2 lines
3.0 KiB
JSON
{"affected":[{"affectedData":[{"product":"OpenAM","vendor":"OpenAM Consortium","versions":[{"status":"affected","version":"13.0 and later"}]}],"source":"vultures@jpcert.or.jp"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:osstech:openam:*:*:*:*:*:*:*:*","matchCriteriaId":"7A554DB6-118C-408A-BF84-80DE886F86A5","versionEndIncluding":"13.0.0-120","versionStartIncluding":"13.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"OpenAM (Open Source Edition) 13.0 and later does not properly manage sessions, which allows remote authenticated attackers to change the security questions and reset the login password via unspecified vectors."},{"lang":"es","value":"OpenAM (Open Source Edition), en versiones 13.0 y siguientes, no gestiona las sesiones correctamente, lo que permite que los atacantes autenticados remotos cambien las preguntas de seguridad y restablezcan la contraseña de inicio de sesión mediante vectores sin especificar."}],"id":"CVE-2018-0696","lastModified":"2026-06-17T01:31:28.710","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"LOW","cvssData":{"accessComplexity":"MEDIUM","accessVector":"NETWORK","authentication":"SINGLE","availabilityImpact":"NONE","baseScore":3.5,"confidentialityImpact":"PARTIAL","integrityImpact":"NONE","vectorString":"AV:N/AC:M/Au:S/C:P/I:N/A:N","version":"2.0"},"exploitabilityScore":6.8,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV30":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.0"},"exploitabilityScore":1.6,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2019-02-13T18:29:00.247","references":[{"source":"vultures@jpcert.or.jp","tags":["Third Party Advisory"],"url":"http://jvn.jp/en/jp/JVN49995005/index.html"},{"source":"vultures@jpcert.or.jp","tags":["Permissions Required","Third Party Advisory"],"url":"https://www.cs.themistruct.com/report/wam20181012"},{"source":"vultures@jpcert.or.jp","tags":["Third Party Advisory"],"url":"https://www.osstech.co.jp/support/am2018-4-1-en"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"http://jvn.jp/en/jp/JVN49995005/index.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"],"url":"https://www.cs.themistruct.com/report/wam20181012"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://www.osstech.co.jp/support/am2018-4-1-en"}],"sourceIdentifier":"vultures@jpcert.or.jp","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-640"}],"source":"nvd@nist.gov","type":"Primary"}]}
|