Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2009-0030

Date: January 21, 2009

A certain Red Hat patch for SquirrelMail 1.4.8 sets the same SQMSESSID cookie value for all sessions, which allows remote authenticated users to access other users' folder lists and configuration data in opportunistic circumstances by using the standard webmail.php interface. NOTE: this vulnerability exists because of an incorrect fix for CVE-2008-3663.

Severity Score

Related Resources (12)

http://www.securityfocus.com/bid/33354
http://secunia.com/advisories/33611
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10366
https://nvd.nist.gov/vuln/detail/CVE-2009-0030
https://rhn.redhat.com/errata/RHSA-2009-0057.html
https://access.redhat.com/security/cve/CVE-2009-0030
http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html
https://bugzilla.redhat.com/show_bug.cgi?id=480488
https://bugzilla.redhat.com/show_bug.cgi?id=480224
https://exchange.xforce.ibmcloud.com/vulnerabilities/48115
http://securitytracker.com/id?1021611
https://www.mend.io/vulnerability-database/CVE-2009-0030

Severity Score

Weakness Type (CWE)

Improper Authentication

CWE-287

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): LOW
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): LOW
Integrity (I): LOW
Availability (A): LOW

CVSS v2

Base Score:
Access Vector (AV): NETWORK
Access Complexity (AC): LOW
Authentication (AU): SINGLE
Confidentiality (C): PARTIAL
Integrity (I): PARTIAL
Availability (A): PARTIAL
Additional information:

Do you need more information?

Contact Us