CVE-2007-2637 : MoinMoin before 20070507 does not properly enforce ACLs for calendars and includ

MoinMoin before 20070507 does not properly enforce ACLs for calendars and includes, which allows remote attackers to read certain pages via unspecified vectors.

Published 2007-05-13 23:19:00

Updated 2017-07-29 01:31:37

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2007-2637

Moinmoin » Moinmoin
Versions up to, including, (<=) 1.5.7
cpe:2.3:a:moinmoin:moinmoin:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ubuntu » Ubuntu Linux » Version: 6.06 Lts
When used together with: Ubuntu » Ubuntu Linux » Version: 6.10
When used together with: Ubuntu » Ubuntu Linux » Version: 7.04

Exploit prediction scoring system (EPSS) score for CVE-2007-2637

EPSS FAQ

3.48%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 91 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2007-2637

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
5.0	MEDIUM	AV:N/AC:L/Au:N/C:P/I:N/A:N	10.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None

References for CVE-2007-2637

https://exchange.xforce.ibmcloud.com/vulnerabilities/34474

MoinMoin ACL calendar and include information disclosure CVE-2007-2637 Vulnerability Report
http://www.debian.org/security/2008/dsa-1514

[SECURITY] [DSA 1514-1] New moin packages fix several vulnerabilities

CVEs referencing this url
http://www.ubuntu.com/usn/usn-458-1

USN-458-1: MoinMoin vulnerabilities | Ubuntu security notices | Ubuntu
Patch

Jump to

Vulnerability Details : CVE-2007-2637

Products affected by CVE-2007-2637

Exploit prediction scoring system (EPSS) score for CVE-2007-2637

CVSS scores for CVE-2007-2637

References for CVE-2007-2637