CVE-2008-6109

{"id": "CVE-2008-6109", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.6, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}]}, "published": "2009-02-11T00:30:00.203", "references": [{"url": "http://secunia.com/advisories/30041", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://sourceforge.net/project/shownotes.php?group_id=82533&release_id=596220", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/29022", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42139", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-264"}]}], "descriptions": [{"lang": "en", "value": "Robin Rawson-Tetley Animal Shelter Manager (ASM) before 2.2.2 does not properly enforce the privileges of user accounts, which allows local users to bypass intended access restrictions by (1) opening unspecified screens, related to the \"double click selector bug\"; or modifying a (2) animal, (3) owner, (4) lost/found, (5) diary note, (6) owner donation, or (7) waiting list record, related to \"change permissions\" and the \"new UI.\""}, {"lang": "es", "value": "Robin Rawson-Tetley Animal Shelter Manager (ASM) anteriores a v2.2.2 no respeta los privilegios de las cuentas de usuario, lo que permite a usuarios locales evitar las restricciones de acceso previstas mediante (1)la apertura de ventanas inespec\u00edficas, relacionado con el error \"selector doble click\"; o mediante la modificaci\u00f3n de un (2) animal, (3) propietario, (4) perdido/encontrado, (5)notas diarias, (6) donaci\u00f3n de propietario, o (7) registro de lista de espera, relacionado con los \"cambios de permisos\" y la \"nueva interfaz de usuario\"."}], "lastModified": "2017-08-08T01:33:44.750", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:shelter_manager:animal_shelter_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E5A0E53D-7AD6-40F4-962C-7D0B765D529D", "versionEndIncluding": "2.2.1"}, {"criteria": "cpe:2.3:a:shelter_manager:animal_shelter_manager:1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5B3C772C-E108-4336-8377-F12E96097F52"}, {"criteria": "cpe:2.3:a:shelter_manager:animal_shelter_manager:1.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0187FA02-69E5-49C6-95DB-85A827E1B517"}, {"criteria": "cpe:2.3:a:shelter_manager:animal_shelter_manager:1.11:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1A5F4AB0-24CD-4AF6-A967-765918E835AF"}, {"criteria": "cpe:2.3:a:shelter_manager:animal_shelter_manager:1.12:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "58C72FBB-A860-4EE5-A3D9-68E0A1C7F789"}, {"criteria": "cpe:2.3:a:shelter_manager:animal_shelter_manager:1.20:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B154ECE6-0CB4-42B8-8B4D-AC0E63490B51"}, {"criteria": "cpe:2.3:a:shelter_manager:animal_shelter_manager:1.22:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "67E1A926-8C16-489A-9D3D-B53B3BD00DDE"}, {"criteria": "cpe:2.3:a:shelter_manager:animal_shelter_manager:1.30:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F1D03D82-12A9-404A-B905-5075F2A64E78"}, {"criteria": "cpe:2.3:a:shelter_manager:animal_shelter_manager:1.30.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5A374254-A812-4EDB-A40F-5A2F2B13A0C3"}, {"criteria": "cpe:2.3:a:shelter_manager:animal_shelter_manager:1.30.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "04B39BD3-3C21-48D5-8D76-CC8E4413F219"}, {"criteria": "cpe:2.3:a:shelter_manager:animal_shelter_manager:1.30_beta:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2709633D-7249-434A-B399-2A885EF5AC77"}, {"criteria": "cpe:2.3:a:shelter_manager:animal_shelter_manager:1.31:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FB478882-0319-448E-BBCC-B05CD26138A4"}, {"criteria": "cpe:2.3:a:shelter_manager:animal_shelter_manager:1.32:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AE3447F5-228E-46F2-BDAF-73617E649809"}, {"criteria": "cpe:2.3:a:shelter_manager:animal_shelter_manager:1.33:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FD21A6AF-7DE1-450E-96A9-16BD6DD390AE"}, {"criteria": "cpe:2.3:a:shelter_manager:animal_shelter_manager:1.34:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0E074718-259F-4A74-AEEE-4F515299D4B6"}, {"criteria": "cpe:2.3:a:shelter_manager:animal_shelter_manager:1.35:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F1C3A310-8CA2-4CAA-BF3C-0F270CD7B3F9"}, {"criteria": "cpe:2.3:a:shelter_manager:animal_shelter_manager:1.36:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9E7AAFA3-29E1-4C80-95F1-7C837D1C6ADC"}, {"criteria": "cpe:2.3:a:shelter_manager:animal_shelter_manager:1.37:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B5F67A73-30C4-4D05-B078-3DC3DCD6B989"}, {"criteria": "cpe:2.3:a:shelter_manager:animal_shelter_manager:1.38:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DCF9D5B3-542A-4A3F-822F-C5B0B137F814"}, {"criteria": "cpe:2.3:a:shelter_manager:animal_shelter_manager:1.39:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B42CF675-826D-4108-A6C5-9858B69B1E95"}, {"criteria": "cpe:2.3:a:shelter_manager:animal_shelter_manager:1.40:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A6B65828-3876-4173-94FA-52E3129759AF"}, {"criteria": "cpe:2.3:a:shelter_manager:animal_shelter_manager:2.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2EE12865-F9F4-4232-A0AA-1FE272D475F9"}, {"criteria": "cpe:2.3:a:shelter_manager:animal_shelter_manager:2.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C2443110-53F3-4BD3-B54E-9593B8C972FD"}, {"criteria": "cpe:2.3:a:shelter_manager:animal_shelter_manager:2.0.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "479C9000-2206-4F23-A570-D26D01D664A0"}, {"criteria": "cpe:2.3:a:shelter_manager:animal_shelter_manager:2.0.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F31F320A-FF20-48C2-9DE1-C09B0DC1FCF5"}, {"criteria": "cpe:2.3:a:shelter_manager:animal_shelter_manager:2.0.14:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A14D6C86-5912-4B68-9FDB-D4B448F2556C"}, {"criteria": "cpe:2.3:a:shelter_manager:animal_shelter_manager:2.0.15:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "27EA78FF-DB1C-430B-B453-20105FD3C2FE"}, {"criteria": "cpe:2.3:a:shelter_manager:animal_shelter_manager:2.0.16:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D5442F6C-741C-4C31-8033-2C26867CE35C"}, {"criteria": "cpe:2.3:a:shelter_manager:animal_shelter_manager:2.0.17:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2C74338C-EF04-4F9E-AB91-1650D16B8BF8"}, {"criteria": "cpe:2.3:a:shelter_manager:animal_shelter_manager:2.0.18:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6ED71A13-6477-4A08-9DE5-B135BA3E2A40"}, {"criteria": "cpe:2.3:a:shelter_manager:animal_shelter_manager:2.0.21:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F58E05A2-C443-4415-98B3-821AF04B7E10"}, {"criteria": "cpe:2.3:a:shelter_manager:animal_shelter_manager:2.0.22:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3E1298C5-5B3B-43A0-863E-215B52716227"}, {"criteria": "cpe:2.3:a:shelter_manager:animal_shelter_manager:2.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BD9F86A2-A440-4762-B26F-385A5A9EEF48"}, {"criteria": "cpe:2.3:a:shelter_manager:animal_shelter_manager:2.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "11046732-02B9-4ABB-8CF0-8B2DEA697E17"}, {"criteria": "cpe:2.3:a:shelter_manager:animal_shelter_manager:2.2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CDEF7261-C6D8-429D-80D0-99D7BDF704E2"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}