« Volver al listado

CVE-2007-4427

Estado: ModificadaBaja (3.5)—

Unspecified vulnerability in the login page redirection logic in the Cache' Server Page (CSP) implementation in InterSystems Cache' 2007.1.0.369.0 and 2007.1.1.420.0 allows remote authenticated users to modify data on a server, related to encoding of certain parameter values by this redirection logic, aka MAK2116.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Intersystems — Cache Database

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2007-4427",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 3.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:S/C:N/I:P/A:N",
          "authentication": "SINGLE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 6.8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2007-08-20T19:17:00.000",
  "references": [
    {
      "url": "http://groups.google.com/group/intersystems-public-cache/browse_thread/thread/57d7c80dde26fda3/7845e246da5b095b",
      "tags": [
        "Patch"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/40178",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/26541",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.intersystems.com/support/cflash/2007announce.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://groups.google.com/group/intersystems-public-cache/browse_thread/thread/57d7c80dde26fda3/7845e246da5b095b",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/40178",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/26541",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.intersystems.com/support/cflash/2007announce.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Unspecified vulnerability in the login page redirection logic in the Cache' Server Page (CSP) implementation in InterSystems Cache' 2007.1.0.369.0 and 2007.1.1.420.0 allows remote authenticated users to modify data on a server, related to encoding of certain parameter values by this redirection logic, aka MAK2116."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad no especificada en la página de redirección de login en la implementación Cache' Server Page (CSP) en InterSystems Cache' 2007.1.0.369.0 y 2007.1.1.420.0 permite a usuarios validados remotos modificar datos sobre un servidor, relacionado con la codificación de ciertos valores de parámetros a través de esta redirección lógica, también conocida como MAK2116."
    }
  ],
  "lastModified": "2026-06-16T22:44:04.660",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:intersystems:cache_database:2007.1.0.369.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "ECFA09AC-5188-4DF8-9175-CD1E8A962DFA"
            },
            {
              "criteria": "cpe:2.3:a:intersystems:cache_database:2007.1.1.420.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "096ED7D8-11C9-4735-8EFF-8A04254598D4"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}