CVE-2015-10033

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2015-10033
A vulnerability, which was classified as problematic, was found in jvvlee MerlinsBoard. This affects an unknown part of the component Grade Handler. The manipulation leads to improper authorization. The identifier of the patch is 134f5481e2914b7f096cd92a22b1e6bcb8e6dfe5. It is recommended to apply a patch to fix this issue. The identifier VDB-217713 was assigned to this vulnerability.

6.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.2 / Impact : 5.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

3.7 /10

CVSS v2.0 : LOW

V2 Legend

Vector : AV:A/AC:L/Au:M/C:N/I:P/A:P

Exploitability : 4.1 / Impact : 4.9

Access Vector ADJACENT_NETWORK

Access Complexity LOW

Authentication MULTIPLE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
https://github.com/jvvlee/MerlinsBoard/commit/134f5481e2914b7f096cd92a22b1e6bcb8e6dfe5 Patch Third Party Advisory
https://vuldb.com/?ctiid.217713 Third Party Advisory
https://vuldb.com/?id.217713 Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:merlinsboard_project:merlinsboard:*:*:*:*:*:*:*:*
History

11 Apr 2024, 00:53

Type Values Removed Values Added
Summary
  • (es) Se ha encontrado una vulnerabilidad en jvvlee MerlinsBoard y ha sido clasificada como problemática. Una parte desconocida del componente Grade Handler afecta a una parte desconocida. La manipulación conduce a una autorización inadecuada. El identificador del parche es 134f5481e2914b7f096cd92a22b1e6bcb8e6dfe5. Se recomienda aplicar un parche para solucionar este problema. A esta vulnerabilidad se le asignó el identificador VDB-217713.

20 Oct 2023, 08:15

Type Values Removed Values Added
Summary A vulnerability, which was classified as problematic, was found in jvvlee MerlinsBoard. This affects an unknown part of the component Grade Handler. The manipulation leads to improper authorization. The name of the patch is 134f5481e2914b7f096cd92a22b1e6bcb8e6dfe5. It is recommended to apply a patch to fix this issue. The identifier VDB-217713 was assigned to this vulnerability. A vulnerability, which was classified as problematic, was found in jvvlee MerlinsBoard. This affects an unknown part of the component Grade Handler. The manipulation leads to improper authorization. The identifier of the patch is 134f5481e2914b7f096cd92a22b1e6bcb8e6dfe5. It is recommended to apply a patch to fix this issue. The identifier VDB-217713 was assigned to this vulnerability.

13 Jan 2023, 18:21

Type Values Removed Values Added
CWE CWE-285 CWE-863
CPE cpe:2.3:a:merlinsboard_project:merlinsboard:*:*:*:*:*:*:*:*
First Time Merlinsboard Project merlinsboard
Merlinsboard Project
References (MISC) https://github.com/jvvlee/MerlinsBoard/commit/134f5481e2914b7f096cd92a22b1e6bcb8e6dfe5 - (MISC) https://github.com/jvvlee/MerlinsBoard/commit/134f5481e2914b7f096cd92a22b1e6bcb8e6dfe5 - Patch, Third Party Advisory
References (MISC) https://vuldb.com/?ctiid.217713 - (MISC) https://vuldb.com/?ctiid.217713 - Third Party Advisory
References (MISC) https://vuldb.com/?id.217713 - (MISC) https://vuldb.com/?id.217713 - Third Party Advisory
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 6.5

09 Jan 2023, 21:15

Type Values Removed Values Added
New CVE
Information

Published : 2023-01-09 21:15

Updated : 2024-04-11 00:53

NVD link : CVE-2015-10033

Mitre link : CVE-2015-10033

CVE.ORG link : CVE-2015-10033

JSON object : View

Products Affected

merlinsboard_project

  • merlinsboard
CWE
CWE-863

Incorrect Authorization

CWE-285

Improper Authorization