CVE-2008-6109

EUVD-2008-6079
Robin Rawson-Tetley Animal Shelter Manager (ASM) before 2.2.2 does not properly enforce the privileges of user accounts, which allows local users to bypass intended access restrictions by (1) opening unspecified screens, related to the "double click selector bug"; or modifying a (2) animal, (3) owner, (4) lost/found, (5) diary note, (6) owner donation, or (7) waiting list record, related to "change permissions" and the "new UI."
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.6 UNKNOWN
LOCAL
LOW
AV:L/AC:L/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 15%
Affected Products (NVD)
VendorProductVersion
shelter_manageranimal_shelter_manager
𝑥
≤ 2.2.1
shelter_manageranimal_shelter_manager
1.1
shelter_manageranimal_shelter_manager
1.3
shelter_manageranimal_shelter_manager
1.11
shelter_manageranimal_shelter_manager
1.12
shelter_manageranimal_shelter_manager
1.20
shelter_manageranimal_shelter_manager
1.22
shelter_manageranimal_shelter_manager
1.30
shelter_manageranimal_shelter_manager
1.30.1
shelter_manageranimal_shelter_manager
1.30.2
shelter_manageranimal_shelter_manager
1.30_beta:_beta
shelter_manageranimal_shelter_manager
1.31
shelter_manageranimal_shelter_manager
1.32
shelter_manageranimal_shelter_manager
1.33
shelter_manageranimal_shelter_manager
1.34
shelter_manageranimal_shelter_manager
1.35
shelter_manageranimal_shelter_manager
1.36
shelter_manageranimal_shelter_manager
1.37
shelter_manageranimal_shelter_manager
1.38
shelter_manageranimal_shelter_manager
1.39
shelter_manageranimal_shelter_manager
1.40
shelter_manageranimal_shelter_manager
2.0.1
shelter_manageranimal_shelter_manager
2.0.2
shelter_manageranimal_shelter_manager
2.0.6
shelter_manageranimal_shelter_manager
2.0.8
shelter_manageranimal_shelter_manager
2.0.14
shelter_manageranimal_shelter_manager
2.0.15
shelter_manageranimal_shelter_manager
2.0.16
shelter_manageranimal_shelter_manager
2.0.17
shelter_manageranimal_shelter_manager
2.0.18
shelter_manageranimal_shelter_manager
2.0.21
shelter_manageranimal_shelter_manager
2.0.22
shelter_manageranimal_shelter_manager
2.1.0
shelter_manageranimal_shelter_manager
2.1.1
shelter_manageranimal_shelter_manager
2.2.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://secunia.com/advisories/30041
http://sourceforge.net/project/shownotes.php?group_id=82533&release_id=596220
http://www.securityfocus.com/bid/29022
https://exchange.xforce.ibmcloud.com/vulnerabilities/42139
http://secunia.com/advisories/30041
http://sourceforge.net/project/shownotes.php?group_id=82533&release_id=596220
http://www.securityfocus.com/bid/29022
https://exchange.xforce.ibmcloud.com/vulnerabilities/42139