CVE-2008-3268

{"id": "CVE-2008-3268", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2008-07-24T15:41:00.000", "references": [{"url": "http://secunia.com/advisories/31147", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://sourceforge.net/project/shownotes.php?release_id=614202", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/30300", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/43900", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/31147", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://sourceforge.net/project/shownotes.php?release_id=614202", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/30300", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/43900", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-264"}, {"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in phpScheduleIt 1.2.0 through 1.2.9, when useLogonName is enabled, allows remote attackers with administrator email address knowledge to bypass restrictions and gain privileges via unspecified vectors related to login names. NOTE: some of these details are obtained from third party information."}, {"lang": "es", "value": "Vulnerabilidad no especificada en phpScheduleIt de 1.2.0 a 1.2.9, cuando useLogonName est\u00e1 habilitado, permite a atacantes remotos que conocen direcciones de email de administradores evitar las restricciones y obtener privilegios mediante vectores no especificados relacionados con nombres de login. NOTA: algunos de estos detalles se han obtenido \u00fanicamente de informaci\u00f3n de terceros."}], "lastModified": "2024-11-21T00:48:50.990", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:brickhost:phpscheduleit:1.2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7663D802-7547-4FE0-B5A3-D20B18ADB6E9"}, {"criteria": "cpe:2.3:a:brickhost:phpscheduleit:1.2.0:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D69ADD45-37E8-480F-8C06-3295A9BB5B78"}, {"criteria": "cpe:2.3:a:brickhost:phpscheduleit:1.2.0:rc1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FC0D9466-E7BD-4D1C-9AFA-596198A5B65E"}, {"criteria": "cpe:2.3:a:brickhost:phpscheduleit:1.2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CFB149A8-0B97-438B-8351-91446232D500"}, {"criteria": "cpe:2.3:a:brickhost:phpscheduleit:1.2.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1FCC62CE-E455-449C-A03E-23C97D834143"}, {"criteria": "cpe:2.3:a:brickhost:phpscheduleit:1.2.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3019FB4F-E2E1-4E4B-B537-F6E12262950B"}, {"criteria": "cpe:2.3:a:brickhost:phpscheduleit:1.2.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5D209B2F-11D9-4C66-AA9D-ABF706B436A6"}, {"criteria": "cpe:2.3:a:brickhost:phpscheduleit:1.2.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "82A187A7-6985-464C-B9E5-81FFB815261D"}, {"criteria": "cpe:2.3:a:brickhost:phpscheduleit:1.2.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F79B653B-9D13-4B72-83EB-E3DB806B815B"}, {"criteria": "cpe:2.3:a:brickhost:phpscheduleit:1.2.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8B218350-9512-4C0A-9BDD-3DF7CE26921E"}, {"criteria": "cpe:2.3:a:brickhost:phpscheduleit:1.2.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0CDB5CB2-19E6-4CF9-90A5-44FC4E1CC683"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}