medium5.0
CVE-2008-3503
RSSFromParent in Plain Black WebGUI before 7.5.13 does not restrict view access to Collaboration System (CS) RSS feeds, which allows remote attackers to obtain…
Impact
RSSFromParent in Plain Black WebGUI before 7.5.13 does not restrict view access to Collaboration System (CS) RSS feeds, which allows remote attackers to obtain sensitive information (CS data).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Webgui | Plain Black Webgui | Versions 0.9.0, 0.10.0, 0.11.0, 0.12.0, 1.0.0, 1.0.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/30782
- http://www.securityfocus.com/bid/29927
- http://www.vupen.com/english/advisories/2008/1932/references
- http://www.webgui.org/bugs/tracker/security-issue---collaboration-rss/
- http://www.webgui.org/getwebgui/advisories/webgui-7_5_13-beta-released
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43344
- http://secunia.com/advisories/30782
- http://www.securityfocus.com/bid/29927
- http://www.vupen.com/english/advisories/2008/1932/references
- http://www.webgui.org/bugs/tracker/security-issue---collaboration-rss/
- http://www.webgui.org/getwebgui/advisories/webgui-7_5_13-beta-released
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43344