CVE-2010-0550

admin.htm in Geo++ GNCASTER 1.4.0.7 and earlier does not properly enforce HTTP Digest Authentication, which allows remote authenticated users to use HTTP Basic Authentication, bypassing intended server policy.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:S/C:N/I:P/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 56%
VendorProductVersion
geoppgeo\+\+_gncaster
𝑥
≤ 1.4.0.7
geoppgeo\+\+_gncaster
1.4.0.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://osvdb.org/62013
http://secunia.com/advisories/38323
http://www.redteam-pentesting.de/en/advisories/rt-sa-2010-003/-geo-r-gncaster-faulty-implementation-of-http-digest-authentication
http://www.securityfocus.com/archive/1/509199/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/55976
http://osvdb.org/62013
http://secunia.com/advisories/38323
http://www.redteam-pentesting.de/en/advisories/rt-sa-2010-003/-geo-r-gncaster-faulty-implementation-of-http-digest-authentication
http://www.securityfocus.com/archive/1/509199/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/55976