CVE-2012-2238 - Vulnerability Details - OpenCVE

trytond 2.4: ModelView.button fails to validate authorization

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact High

Availability Impact None

User Interaction None

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact Partial

Availability Impact None

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Tryton	Trytond

Configuration 1 [-]

cpe:2.3:a:tryton:trytond:*:*:*:*:*:*:*:*

No data.

References

Link	Providers
http://hg.tryton.org/2.4/trytond/rev/279f0031b461
http://www.openwall.com/lists/oss-security/2012/09/11/10
http://www.securityfocus.com/bid/55503
https://exchange.xforce.ibmcloud.com/vulnerabilities/78435
https://security-tracker.debian.org/tracker/CVE-2012-2238

History

No history.

MITRE

Status: PUBLISHED

Assigner: debian

Published: 2019-11-21T13:47:31

Updated: 2024-08-06T19:26:08.989Z

Reserved: 2012-04-16T00:00:00

Link: CVE-2012-2238

Vulnrichment

No data.

NVD

Status : Modified

Published: 2019-11-21T14:15:12.147

Modified: 2024-11-21T01:38:45.037

Link: CVE-2012-2238

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "trytond", "vendor": "tryton", "versions": [{"status": "affected", "version": "\u2264 2.4"}]}], "descriptions": [{"lang": "en", "value": "trytond 2.4: ModelView.button fails to validate authorization"}], "problemTypes": [{"descriptions": [{"description": "UNKNOWN_TYPE", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2019-11-21T13:47:31", "orgId": "79363d38-fa19-49d1-9214-5f28da3f3ac5", "shortName": "debian"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://security-tracker.debian.org/tracker/CVE-2012-2238"}, {"tags": ["x_refsource_MISC"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/78435"}, {"tags": ["x_refsource_MISC"], "url": "http://www.openwall.com/lists/oss-security/2012/09/11/10"}, {"tags": ["x_refsource_MISC"], "url": "http://www.securityfocus.com/bid/55503"}, {"tags": ["x_refsource_MISC"], "url": "http://hg.tryton.org/2.4/trytond/rev/279f0031b461"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "security@debian.org", "ID": "CVE-2012-2238", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "trytond", "version": {"version_data": [{"version_value": "\u2264 2.4"}]}}]}, "vendor_name": "tryton"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "trytond 2.4: ModelView.button fails to validate authorization"}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "UNKNOWN_TYPE"}]}]}, "references": {"reference_data": [{"name": "https://security-tracker.debian.org/tracker/CVE-2012-2238", "refsource": "MISC", "url": "https://security-tracker.debian.org/tracker/CVE-2012-2238"}, {"name": "https://exchange.xforce.ibmcloud.com/vulnerabilities/78435", "refsource": "MISC", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/78435"}, {"name": "http://www.openwall.com/lists/oss-security/2012/09/11/10", "refsource": "MISC", "url": "http://www.openwall.com/lists/oss-security/2012/09/11/10"}, {"name": "http://www.securityfocus.com/bid/55503", "refsource": "MISC", "url": "http://www.securityfocus.com/bid/55503"}, {"name": "http://hg.tryton.org/2.4/trytond/rev/279f0031b461", "refsource": "MISC", "url": "http://hg.tryton.org/2.4/trytond/rev/279f0031b461"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T19:26:08.989Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://security-tracker.debian.org/tracker/CVE-2012-2238"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/78435"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://www.openwall.com/lists/oss-security/2012/09/11/10"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://www.securityfocus.com/bid/55503"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://hg.tryton.org/2.4/trytond/rev/279f0031b461"}]}]}, "cveMetadata": {"assignerOrgId": "79363d38-fa19-49d1-9214-5f28da3f3ac5", "assignerShortName": "debian", "cveId": "CVE-2012-2238", "datePublished": "2019-11-21T13:47:31", "dateReserved": "2012-04-16T00:00:00", "dateUpdated": "2024-08-06T19:26:08.989Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:tryton:trytond:*:*:*:*:*:*:*:*", "matchCriteriaId": "04247CE0-51D7-423F-9E47-839F187D6AA7", "versionEndExcluding": "2.4.2", "versionStartIncluding": "2.4.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "trytond 2.4: ModelView.button fails to validate authorization"}, {"lang": "es", "value": "trytond versi\u00f3n 2.4: ModelView.button presenta un fallo al comprobar la autorizaci\u00f3n."}], "id": "CVE-2012-2238", "lastModified": "2024-11-21T01:38:45.037", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2019-11-21T14:15:12.147", "references": [{"source": "security@debian.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://hg.tryton.org/2.4/trytond/rev/279f0031b461"}, {"source": "security@debian.org", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://www.openwall.com/lists/oss-security/2012/09/11/10"}, {"source": "security@debian.org", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/55503"}, {"source": "security@debian.org", "tags": ["Third Party Advisory", "VDB Entry"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/78435"}, {"source": "security@debian.org", "tags": ["Third Party Advisory"], "url": "https://security-tracker.debian.org/tracker/CVE-2012-2238"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://hg.tryton.org/2.4/trytond/rev/279f0031b461"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://www.openwall.com/lists/oss-security/2012/09/11/10"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/55503"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/78435"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://security-tracker.debian.org/tracker/CVE-2012-2238"}], "sourceIdentifier": "security@debian.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-863"}], "source": "nvd@nist.gov", "type": "Primary"}]}