Unscored severity · published Feb 11, 2009
CVE-2008-6109
Robin Rawson-Tetley Animal Shelter Manager (ASM) before 2.2.2 does not properly enforce the privileges of user accounts, which allows local users to bypass intended access…
–
CVSS
0.3%
EPSS
No
On KEV
Description
Robin Rawson-Tetley Animal Shelter Manager (ASM) before 2.2.2 does not properly enforce the privileges of user accounts, which allows local users to bypass intended access restrictions by (1) opening unspecified screens, related to the "double click selector bug"; or modifying a (2) animal, (3) owner, (4) lost/found, (5) diary note, (6) owner donation, or (7) waiting list record, related to "change permissions" and the "new UI."
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 22% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AS
Animal Shelter Manager · Shelter Manager
through 2.2.1; 1.1; 1.3; 1.11; 1.12; 1.20; +29 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-6109
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-6109
Vendor Advisory
http://secunia.com/advisories/30041
sourceforge.net
http://sourceforge.net/project/shownotes.php?group_id=82533&release_id=596220
www.securityfocus.com
http://www.securityfocus.com/bid/29022
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/42139
More from Animal Shelter Manager
–
CVE-2008-2174
Multiple unspecified vulnerabilities in Robin Rawson-Tetley Animal Shelter Manager (ASM) before 2.2.2 have unknown impact and attack vectors, related to "various areas where…