« Volver al listado

CVE-2010-3925

Estado: ModificadaMedia (5.8)—

Contents-Mall before 15 does not properly handle passwords, which allows remote attackers to discover the administrative password, and consequently obtain sensitive information or modify data, via unspecified vectors.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Wb-i — Contents-mall

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2010-3925",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 4.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ]
  },
  "affected": [
    {
      "source": "vultures@jpcert.or.jp",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2011-01-13T19:00:02.073",
  "references": [
    {
      "url": "http://jvn.jp/en/jp/JVN53293565/index.html",
      "source": "vultures@jpcert.or.jp"
    },
    {
      "url": "http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000001.html",
      "source": "vultures@jpcert.or.jp"
    },
    {
      "url": "http://mag.wb-i.net/2010_05_07.html",
      "source": "vultures@jpcert.or.jp"
    },
    {
      "url": "http://osvdb.org/70445",
      "source": "vultures@jpcert.or.jp"
    },
    {
      "url": "http://secunia.com/advisories/42950",
      "source": "vultures@jpcert.or.jp"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64835",
      "source": "vultures@jpcert.or.jp"
    },
    {
      "url": "http://jvn.jp/en/jp/JVN53293565/index.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000001.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://mag.wb-i.net/2010_05_07.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/70445",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/42950",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64835",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-255"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Contents-Mall before 15 does not properly handle passwords, which allows remote attackers to discover the administrative password, and consequently obtain sensitive information or modify data, via unspecified vectors."
    },
    {
      "lang": "es",
      "value": "Contents-Mall anterior a v15 de no gestiona correctamente las contraseñas, lo cual permite a atacantes remotos descubrir la contraseña de administrador, y en consecuencia obtener información sensible o modificar los datos, a través de vectores no especificados."
    }
  ],
  "lastModified": "2026-06-16T23:23:50.137",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:wb-i:contents-mall:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2219900B-38D9-493D-812F-1FDEA6471895",
              "versionEndIncluding": "14.00"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "vultures@jpcert.or.jp"
}