Home > Vulnerability Database > CVE-2008-4791

Mend.io Vulnerability Database

New vulnerability? Tell us about it!

CVE-2008-4791

Date: October 29, 2008

The user module in Drupal 5.x before 5.11 and 6.x before 6.5 might allow remote authenticated users to bypass intended login access rules and successfully login via unknown vectors.

Severity Score

5.0

Related Resources (7)

Url: http://www.openwall.com/lists/oss-security/2008/10/21/7

Url: https://exchange.xforce.ibmcloud.com/vulnerabilities/45766

Url: https://nvd.nist.gov/vuln/detail/CVE-2008-4791

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2008-4791

Url: http://drupal.org/node/318706

Url: http://secunia.com/advisories/32201

Url: https://www.mend.io/vulnerability-database/CVE-2008-4791

Severity Score

5.0

Weakness Type (CWE)

Permissions, Privileges, and Access Control

CWE-264

CVSS v3.1

Base Score:	5.0
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	HIGH
Privileges Required (PR):	LOW
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	LOW
Integrity (I):	LOW
Availability (A):	LOW

CVSS v2

Base Score:	6.0
Access Vector (AV):	NETWORK
Access Complexity (AC):	MEDIUM
Authentication (AU):	SINGLE
Confidentiality (C):	PARTIAL
Integrity (I):	PARTIAL
Availability (A):	PARTIAL
Additional information:

Do you need more information?

Contact Us