CVE-2009-1055

Unspecified vulnerability in the web service in Sitecore CMS 5.3.1 rev. 071114 allows remote authenticated users to gain access to security databases, and obtain administrative and user credentials, via unknown vectors related to SOAP and XML requests.

CVSS v2.0 4.0 MEDIUM

4.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:S/C:P/I:N/A:N

Exploitability : 8.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://sdn5.sitecore.net/Products/Sitecore%20V5/Sitecore%20CMS%205%2C-d-%2C3/ReleaseNotes/V5%2C-d-%2C3%2C-d-%2C2/ChangeLog.aspx
http://secunia.com/advisories/34356	Vendor Advisory
http://www.securityfocus.com/archive/1/501929/100/0/threaded
http://www.securityfocus.com/bid/34162
http://www.vupen.com/english/advisories/2009/0753	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/49298

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:sitecore:cms:5.3.0:::::::*
	cpe:2.3:a:sitecore:cms:5.3.1:::::::*

History

07 Nov 2023, 02:03

Type	Values Removed	Values Added
References	{'url': 'http://sdn5.sitecore.net/Products/Sitecore%20V5/Sitecore%20CMS%205,-d-,3/ReleaseNotes/V5,-d-,3,-d-,2/ChangeLog.aspx', 'name': 'http://sdn5.sitecore.net/Products/Sitecore%20V5/Sitecore%20CMS%205,-d-,3/ReleaseNotes/V5,-d-,3,-d-,2/ChangeLog.aspx', 'tags': ['Vendor Advisory'], 'refsource': 'CONFIRM'}	() http://sdn5.sitecore.net/Products/Sitecore%20V5/Sitecore%20CMS%205%2C-d-%2C3/ReleaseNotes/V5%2C-d-%2C3%2C-d-%2C2/ChangeLog.aspx -

Information

Published : 2009-03-24 14:30

Updated : 2023-12-10 10:51

NVD link : CVE-2009-1055

Mitre link : CVE-2009-1055

CVE.ORG link : CVE-2009-1055

JSON object : View

Products Affected

sitecore

cms

CWE

NVD-CWE-Other

{"id": "CVE-2009-1055", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N", "authentication": "SINGLE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2009-03-24T14:30:00.420", "references": [{"url": "http://sdn5.sitecore.net/Products/Sitecore%20V5/Sitecore%20CMS%205%2C-d-%2C3/ReleaseNotes/V5%2C-d-%2C3%2C-d-%2C2/ChangeLog.aspx", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/34356", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/501929/100/0/threaded", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/34162", "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2009/0753", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/49298", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in the web service in Sitecore CMS 5.3.1 rev. 071114 allows remote authenticated users to gain access to security databases, and obtain administrative and user credentials, via unknown vectors related to SOAP and XML requests."}, {"lang": "es", "value": "Vulnerabilidad inespec\u00edfica en el servicio web en Sitecore CMS v5.3.1 rev. 071114 permite a usuarios remotos autenticados conseguir acceso a las bases de datos de seguridad, y obtener credenciales administrativas y de usuario, a trav\u00e9s de vectores desconocidos relacionados con las peticiones a SOAP y XML."}], "lastModified": "2023-11-07T02:03:48.720", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:sitecore:cms:5.3.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "20271A9D-C591-4206-AF17-9170BA32C70E"}, {"criteria": "cpe:2.3:a:sitecore:cms:5.3.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FADD8B45-3408-454B-BB24-C9E51CDC05D7"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}