« Volver al listado

CVE-2004-2431

Estado: ModificadaAlta (7.5)—

Unknown vulnerability in The Ignition Project ignitionServer 0.1.2 through 0.3.1, with the linking service enabled, allows remote attackers to bypass authentication.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

THE Ignition Project — Ignitionserver

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2004-2431",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": true,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2004-12-31T05:00:00.000",
  "references": [
    {
      "url": "http://secunia.com/advisories/11824",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://sourceforge.net/forum/forum.php?forum_id=381807",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.osvdb.org/6844",
      "tags": [
        "Patch"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/10525",
      "tags": [
        "Patch"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16397",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/11824",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://sourceforge.net/forum/forum.php?forum_id=381807",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.osvdb.org/6844",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/10525",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16397",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Unknown vulnerability in The Ignition Project ignitionServer 0.1.2 through 0.3.1, with the linking service enabled, allows remote attackers to bypass authentication."
    }
  ],
  "lastModified": "2026-06-16T22:09:38.443",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:the_ignition_project:ignitionserver:0.1.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "641C594E-35BC-4F2F-9E15-3D62FE8FCBD6"
            },
            {
              "criteria": "cpe:2.3:a:the_ignition_project:ignitionserver:0.1.2_r2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1D702B7D-19E6-49D9-8E0E-267811688DF9"
            },
            {
              "criteria": "cpe:2.3:a:the_ignition_project:ignitionserver:0.2.1_brc1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "88BB7F7A-5BCD-407D-BA61-07F19AB6F570"
            },
            {
              "criteria": "cpe:2.3:a:the_ignition_project:ignitionserver:0.2.2_brc2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "92B91D39-7505-4F07-A225-437E0273B645"
            },
            {
              "criteria": "cpe:2.3:a:the_ignition_project:ignitionserver:0.2.3_brc3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AC15E8DB-8FA1-4A14-8CC3-90C41924293C"
            },
            {
              "criteria": "cpe:2.3:a:the_ignition_project:ignitionserver:0.3.1_b1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "58A3AE05-FCDC-499D-A8EF-FF06D7DBDAD1"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}