Unscored severity · published Mar 6, 2009
CVE-2008-6412
Unspecified vulnerability in Vignette Content Management 7.3.0.5, 7.3.1, 7.3.1.1, 7.4, and 7.5 allows "low privileged" users to gain administrator privileges via unknown attack…
–
CVSS
1.4%
EPSS
No
On KEV
Description
Unspecified vulnerability in Vignette Content Management 7.3.0.5, 7.3.1, 7.3.1.1, 7.4, and 7.5 allows "low privileged" users to gain administrator privileges via unknown attack vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 72% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
VC
Vignette Content Management · Vignette
7.3.0.5; 7.3.1; 7.3.1.1; 7.4; 7.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-6412
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-6412
Patch
http://dialog.vignette.com/hm?g=1.2jds7.bky8.rs.0.27gqh.htk8&h=1
Vendor Advisory
http://secunia.com/advisories/31983
www.securityfocus.com
http://www.securityfocus.com/bid/31328
www.securitytracker.com
http://www.securitytracker.com/id?1020910
Vendor Advisory
http://www.vupen.com/english/advisories/2008/2662
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/45312