CVE-2008-6109
Estado: ModificadaMedia (4.6)—
Robin Rawson-Tetley Animal Shelter Manager (ASM) before 2.2.2 does not properly enforce the privileges of user accounts, which allows local users to bypass intended access restrictions by (1) opening unspecified screens, related to the "double click selector bug"; or modifying a (2) animal, (3) owner, (4) lost/found, (5) diary note, (6) owner donation, or (7) waiting list record, related to "change permissions" and the "new UI."
CVSS
- Versión: 2.0
- Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
- Puntuación base: 4.6
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.29%
- Percentil entre todas las CVEs puntuadas: 20
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- CWE-264
Referencias
- http://secunia.com/advisories/30041
- http://sourceforge.net/project/shownotes.php?group_id=82533&release_id=596220
- http://www.securityfocus.com/bid/29022
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42139
- http://secunia.com/advisories/30041
- http://sourceforge.net/project/shownotes.php?group_id=82533&release_id=596220
- http://www.securityfocus.com/bid/29022
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42139
JSON original (NVD)
Mostrar
{
"id": "CVE-2008-6109",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 4.6,
"accessVector": "LOCAL",
"vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 6.4,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 3.9,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": true,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2009-02-11T00:30:00.203",
"references": [
{
"url": "http://secunia.com/advisories/30041",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://sourceforge.net/project/shownotes.php?group_id=82533&release_id=596220",
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/29022",
"source": "cve@mitre.org"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42139",
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/30041",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://sourceforge.net/project/shownotes.php?group_id=82533&release_id=596220",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/29022",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42139",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-264"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Robin Rawson-Tetley Animal Shelter Manager (ASM) before 2.2.2 does not properly enforce the privileges of user accounts, which allows local users to bypass intended access restrictions by (1) opening unspecified screens, related to the \"double click selector bug\"; or modifying a (2) animal, (3) owner, (4) lost/found, (5) diary note, (6) owner donation, or (7) waiting list record, related to \"change permissions\" and the \"new UI.\""
},
{
"lang": "es",
"value": "Robin Rawson-Tetley Animal Shelter Manager (ASM) anteriores a v2.2.2 no respeta los privilegios de las cuentas de usuario, lo que permite a usuarios locales evitar las restricciones de acceso previstas mediante (1)la apertura de ventanas inespecíficas, relacionado con el error \"selector doble click\"; o mediante la modificación de un (2) animal, (3) propietario, (4) perdido/encontrado, (5)notas diarias, (6) donación de propietario, o (7) registro de lista de espera, relacionado con los \"cambios de permisos\" y la \"nueva interfaz de usuario\"."
}
],
"lastModified": "2026-06-16T23:01:38.073",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:shelter_manager:animal_shelter_manager:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E5A0E53D-7AD6-40F4-962C-7D0B765D529D",
"versionEndIncluding": "2.2.1"
},
{
"criteria": "cpe:2.3:a:shelter_manager:animal_shelter_manager:1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5B3C772C-E108-4336-8377-F12E96097F52"
},
{
"criteria": "cpe:2.3:a:shelter_manager:animal_shelter_manager:1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0187FA02-69E5-49C6-95DB-85A827E1B517"
},
{
"criteria": "cpe:2.3:a:shelter_manager:animal_shelter_manager:1.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1A5F4AB0-24CD-4AF6-A967-765918E835AF"
},
{
"criteria": "cpe:2.3:a:shelter_manager:animal_shelter_manager:1.12:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "58C72FBB-A860-4EE5-A3D9-68E0A1C7F789"
},
{
"criteria": "cpe:2.3:a:shelter_manager:animal_shelter_manager:1.20:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B154ECE6-0CB4-42B8-8B4D-AC0E63490B51"
},
{
"criteria": "cpe:2.3:a:shelter_manager:animal_shelter_manager:1.22:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "67E1A926-8C16-489A-9D3D-B53B3BD00DDE"
},
{
"criteria": "cpe:2.3:a:shelter_manager:animal_shelter_manager:1.30:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F1D03D82-12A9-404A-B905-5075F2A64E78"
},
{
"criteria": "cpe:2.3:a:shelter_manager:animal_shelter_manager:1.30.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5A374254-A812-4EDB-A40F-5A2F2B13A0C3"
},
{
"criteria": "cpe:2.3:a:shelter_manager:animal_shelter_manager:1.30.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "04B39BD3-3C21-48D5-8D76-CC8E4413F219"
},
{
"criteria": "cpe:2.3:a:shelter_manager:animal_shelter_manager:1.30_beta:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2709633D-7249-434A-B399-2A885EF5AC77"
},
{
"criteria": "cpe:2.3:a:shelter_manager:animal_shelter_manager:1.31:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FB478882-0319-448E-BBCC-B05CD26138A4"
},
{
"criteria": "cpe:2.3:a:shelter_manager:animal_shelter_manager:1.32:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AE3447F5-228E-46F2-BDAF-73617E649809"
},
{
"criteria": "cpe:2.3:a:shelter_manager:animal_shelter_manager:1.33:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FD21A6AF-7DE1-450E-96A9-16BD6DD390AE"
},
{
"criteria": "cpe:2.3:a:shelter_manager:animal_shelter_manager:1.34:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0E074718-259F-4A74-AEEE-4F515299D4B6"
},
{
"criteria": "cpe:2.3:a:shelter_manager:animal_shelter_manager:1.35:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F1C3A310-8CA2-4CAA-BF3C-0F270CD7B3F9"
},
{
"criteria": "cpe:2.3:a:shelter_manager:animal_shelter_manager:1.36:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9E7AAFA3-29E1-4C80-95F1-7C837D1C6ADC"
},
{
"criteria": "cpe:2.3:a:shelter_manager:animal_shelter_manager:1.37:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B5F67A73-30C4-4D05-B078-3DC3DCD6B989"
},
{
"criteria": "cpe:2.3:a:shelter_manager:animal_shelter_manager:1.38:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DCF9D5B3-542A-4A3F-822F-C5B0B137F814"
},
{
"criteria": "cpe:2.3:a:shelter_manager:animal_shelter_manager:1.39:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B42CF675-826D-4108-A6C5-9858B69B1E95"
},
{
"criteria": "cpe:2.3:a:shelter_manager:animal_shelter_manager:1.40:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A6B65828-3876-4173-94FA-52E3129759AF"
},
{
"criteria": "cpe:2.3:a:shelter_manager:animal_shelter_manager:2.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2EE12865-F9F4-4232-A0AA-1FE272D475F9"
},
{
"criteria": "cpe:2.3:a:shelter_manager:animal_shelter_manager:2.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C2443110-53F3-4BD3-B54E-9593B8C972FD"
},
{
"criteria": "cpe:2.3:a:shelter_manager:animal_shelter_manager:2.0.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "479C9000-2206-4F23-A570-D26D01D664A0"
},
{
"criteria": "cpe:2.3:a:shelter_manager:animal_shelter_manager:2.0.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F31F320A-FF20-48C2-9DE1-C09B0DC1FCF5"
},
{
"criteria": "cpe:2.3:a:shelter_manager:animal_shelter_manager:2.0.14:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A14D6C86-5912-4B68-9FDB-D4B448F2556C"
},
{
"criteria": "cpe:2.3:a:shelter_manager:animal_shelter_manager:2.0.15:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "27EA78FF-DB1C-430B-B453-20105FD3C2FE"
},
{
"criteria": "cpe:2.3:a:shelter_manager:animal_shelter_manager:2.0.16:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D5442F6C-741C-4C31-8033-2C26867CE35C"
},
{
"criteria": "cpe:2.3:a:shelter_manager:animal_shelter_manager:2.0.17:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2C74338C-EF04-4F9E-AB91-1650D16B8BF8"
},
{
"criteria": "cpe:2.3:a:shelter_manager:animal_shelter_manager:2.0.18:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6ED71A13-6477-4A08-9DE5-B135BA3E2A40"
},
{
"criteria": "cpe:2.3:a:shelter_manager:animal_shelter_manager:2.0.21:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F58E05A2-C443-4415-98B3-821AF04B7E10"
},
{
"criteria": "cpe:2.3:a:shelter_manager:animal_shelter_manager:2.0.22:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3E1298C5-5B3B-43A0-863E-215B52716227"
},
{
"criteria": "cpe:2.3:a:shelter_manager:animal_shelter_manager:2.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BD9F86A2-A440-4762-B26F-385A5A9EEF48"
},
{
"criteria": "cpe:2.3:a:shelter_manager:animal_shelter_manager:2.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "11046732-02B9-4ABB-8CF0-8B2DEA697E17"
},
{
"criteria": "cpe:2.3:a:shelter_manager:animal_shelter_manager:2.2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CDEF7261-C6D8-429D-80D0-99D7BDF704E2"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}