« Volver al listado

CVE-2008-6399

Estado: ModificadaMedia (6.4)—

Unspecified vulnerability in DotNetNuke 4.5.2 through 4.9 allows remote attackers to "add additional roles to their user account" via unknown attack vectors.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Dnnsoftware — Dotnetnuke

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2008-6399",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.4,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": true,
        "impactScore": 4.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2009-03-05T20:30:00.407",
  "references": [
    {
      "url": "http://osvdb.org/51141",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/33401",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.dotnetnuke.com/News/SecurityPolicy/Securitybulletinno24/tabid/1188/Default.aspx",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/33109",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/51141",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/33401",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.dotnetnuke.com/News/SecurityPolicy/Securitybulletinno24/tabid/1188/Default.aspx",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/33109",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Unspecified vulnerability in DotNetNuke 4.5.2 through 4.9 allows remote attackers to \"add additional roles to their user account\" via unknown attack vectors."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad no especificada en DotNetNuke v4.5.2 hasta v4.9 permite a atacantes remotos \"añadir reglas adicionales de sus cuentas de usuario\" a través de vectores de ataque desconocidos."
    }
  ],
  "lastModified": "2026-06-16T23:02:09.647",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:dnnsoftware:dotnetnuke:4.5.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "225B1E93-6963-4569-AF6F-E534E4DC351E"
            },
            {
              "criteria": "cpe:2.3:a:dnnsoftware:dotnetnuke:4.8.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "067321EB-5A1D-43B6-9826-6E14701CFFCC"
            },
            {
              "criteria": "cpe:2.3:a:dnnsoftware:dotnetnuke:4.8.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1A561AD7-1E12-4F43-B78E-38B565B41B1D"
            },
            {
              "criteria": "cpe:2.3:a:dnnsoftware:dotnetnuke:4.8.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AE07817D-D3D9-4A9F-90A5-CFE0F2CC4F8E"
            },
            {
              "criteria": "cpe:2.3:a:dnnsoftware:dotnetnuke:4.8.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8D12406C-E93F-4248-B8EC-C34DA36B3C6C"
            },
            {
              "criteria": "cpe:2.3:a:dnnsoftware:dotnetnuke:4.9:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F222B3C7-E840-46CF-8229-8E31307B5769"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}