CVE-2004-0522 : Gallery 1.4.3 and earlier allows remote attackers to bypass authentication and o

Gallery 1.4.3 and earlier allows remote attackers to bypass authentication and obtain Gallery administrator privileges.

Published 2004-08-06 04:00:00

Updated 2025-04-03 01:03:51

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2004-0522

Debian » Debian Linux » Version: 3.0
cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*
Matching versions
Debian » Debian Linux » Version: 3.0 PPC Edition
cpe:2.3:o:debian:debian_linux:3.0:*:ppc:*:*:*:*:*
Matching versions
Debian » Debian Linux » Version: 3.0 S-390 Edition
cpe:2.3:o:debian:debian_linux:3.0:*:s-390:*:*:*:*:*
Matching versions
Debian » Debian Linux » Version: 3.0 Mips Edition
cpe:2.3:o:debian:debian_linux:3.0:*:mips:*:*:*:*:*
Matching versions
Debian » Debian Linux » Version: 3.0 Mipsel Edition
cpe:2.3:o:debian:debian_linux:3.0:*:mipsel:*:*:*:*:*
Matching versions
Debian » Debian Linux » Version: 3.0 Alpha Edition
cpe:2.3:o:debian:debian_linux:3.0:*:alpha:*:*:*:*:*
Matching versions
Debian » Debian Linux » Version: 3.0 ARM Edition
cpe:2.3:o:debian:debian_linux:3.0:*:arm:*:*:*:*:*
Matching versions
Debian » Debian Linux » Version: 3.0 Hppa Edition
cpe:2.3:o:debian:debian_linux:3.0:*:hppa:*:*:*:*:*
Matching versions
Debian » Debian Linux » Version: 3.0 Sparc Edition
cpe:2.3:o:debian:debian_linux:3.0:*:sparc:*:*:*:*:*
Matching versions
Debian » Debian Linux » Version: 3.0 Ia-64 Edition
cpe:2.3:o:debian:debian_linux:3.0:*:ia-64:*:*:*:*:*
Matching versions
Debian » Debian Linux » Version: 3.0 M68k Edition
cpe:2.3:o:debian:debian_linux:3.0:*:m68k:*:*:*:*:*
Matching versions
Debian » Debian Linux » Version: 3.0 Ia-32 Edition
cpe:2.3:o:debian:debian_linux:3.0:*:ia-32:*:*:*:*:*
Matching versions
Gallery Project » Gallery » Version: 1.4 Pl1
cpe:2.3:a:gallery_project:gallery:1.4_pl1:*:*:*:*:*:*:*
Matching versions
Gallery Project » Gallery » Version: 1.4
cpe:2.3:a:gallery_project:gallery:1.4:*:*:*:*:*:*:*
Matching versions
Gallery Project » Gallery » Version: 1.4 Pl2
cpe:2.3:a:gallery_project:gallery:1.4_pl2:*:*:*:*:*:*:*
Matching versions
Gallery Project » Gallery » Version: 1.4.1
cpe:2.3:a:gallery_project:gallery:1.4.1:*:*:*:*:*:*:*
Matching versions
Gallery Project » Gallery » Version: 1.4.2
cpe:2.3:a:gallery_project:gallery:1.4.2:*:*:*:*:*:*:*
Matching versions
Gallery Project » Gallery » Version: 1.4.3 Pl1
cpe:2.3:a:gallery_project:gallery:1.4.3_pl1:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2004-0522

EPSS FAQ

2.97%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 85 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2004-0522

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C	10.0	10.0	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

References for CVE-2004-0522

http://www.securityfocus.com/bid/10451

Patch;Vendor Advisory
http://security.gentoo.org/glsa/glsa-200406-10.xml

Gallery: Privilege escalation vulnerability (GLSA 200406-10) — Gentoo security
https://exchange.xforce.ibmcloud.com/vulnerabilities/16301
http://secunia.com/advisories/11752
http://www.debian.org/security/2004/dsa-512

Debian -- The Universal Operating System
Patch;Vendor Advisory

Jump to

Vulnerability Details : CVE-2004-0522

Products affected by CVE-2004-0522

Exploit prediction scoring system (EPSS) score for CVE-2004-0522

CVSS scores for CVE-2004-0522

References for CVE-2004-0522