{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "descriptions": [{"lang": "en", "value": "The (1) reports API and (2) administration feature in the comments API in the Ushahidi Platform before 2.5 do not require authentication, which allows remote attackers to generate reports and organize comments via API functions."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2012-08-12T21:00:00Z", "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://github.com/ushahidi/Ushahidi_Web/commit/13ca6f4"}, {"name": "[oss-security] 20120809 Re: CVE request for Ushahidi", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://openwall.com/lists/oss-security/2012/08/09/5"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://github.com/ushahidi/Ushahidi_Web/commit/f67f4ad"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "secalert@redhat.com", "ID": "CVE-2012-3473", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The (1) reports API and (2) administration feature in the comments API in the Ushahidi Platform before 2.5 do not require authentication, which allows remote attackers to generate reports and organize comments via API functions."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "https://github.com/ushahidi/Ushahidi_Web/commit/13ca6f4", "refsource": "CONFIRM", "url": "https://github.com/ushahidi/Ushahidi_Web/commit/13ca6f4"}, {"name": "[oss-security] 20120809 Re: CVE request for Ushahidi", "refsource": "MLIST", "url": "http://openwall.com/lists/oss-security/2012/08/09/5"}, {"name": "https://github.com/ushahidi/Ushahidi_Web/commit/f67f4ad", "refsource": "CONFIRM", "url": "https://github.com/ushahidi/Ushahidi_Web/commit/f67f4ad"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T20:05:12.650Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://github.com/ushahidi/Ushahidi_Web/commit/13ca6f4"}, {"name": "[oss-security] 20120809 Re: CVE request for Ushahidi", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "http://openwall.com/lists/oss-security/2012/08/09/5"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://github.com/ushahidi/Ushahidi_Web/commit/f67f4ad"}]}]}, "cveMetadata": {"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "assignerShortName": "redhat", "cveId": "CVE-2012-3473", "datePublished": "2012-08-12T21:00:00Z", "dateReserved": "2012-06-14T00:00:00Z", "dateUpdated": "2024-09-16T16:27:36.345Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ushahidi:ushahidi_platform:*:*:*:*:*:*:*:*", "matchCriteriaId": "984B26E4-C672-46DF-B26B-8CAAEDBDFEB0", "versionEndIncluding": "2.4.1", "vulnerable": true}, {"criteria": "cpe:2.3:a:ushahidi:ushahidi_platform:1.0:*:*:*:*:*:*:*", "matchCriteriaId": "86468BDD-17C2-49CC-A488-F38CC8630979", "vulnerable": true}, {"criteria": "cpe:2.3:a:ushahidi:ushahidi_platform:1.2:*:*:*:*:*:*:*", "matchCriteriaId": "E8EBC5A6-4FB0-4385-8299-5D6298977534", "vulnerable": true}, {"criteria": "cpe:2.3:a:ushahidi:ushahidi_platform:2.0:*:*:*:*:*:*:*", "matchCriteriaId": "826225E4-F4F8-4FB6-AFAF-23CD6720CE5E", "vulnerable": true}, {"criteria": "cpe:2.3:a:ushahidi:ushahidi_platform:2.1:*:*:*:*:*:*:*", "matchCriteriaId": "6754F1ED-E827-433C-8F50-71F04293EEB1", "vulnerable": true}, {"criteria": "cpe:2.3:a:ushahidi:ushahidi_platform:2.2:*:*:*:*:*:*:*", "matchCriteriaId": "7B1BC250-09BC-4051-ABEE-8B8FE1558279", "vulnerable": true}, {"criteria": "cpe:2.3:a:ushahidi:ushahidi_platform:2.2.1:*:*:*:*:*:*:*", "matchCriteriaId": "5D260CD2-5483-48D2-87B9-C0298F5F2B23", "vulnerable": true}, {"criteria": "cpe:2.3:a:ushahidi:ushahidi_platform:2.3.1:*:*:*:*:*:*:*", "matchCriteriaId": "489F7397-CF33-42C5-AF46-956D5692C6D1", "vulnerable": true}, {"criteria": "cpe:2.3:a:ushahidi:ushahidi_platform:2.3.2:*:*:*:*:*:*:*", "matchCriteriaId": "B1C84D59-409A-4E73-A65A-8B12594B61DF", "vulnerable": true}, {"criteria": "cpe:2.3:a:ushahidi:ushahidi_platform:2.4:*:*:*:*:*:*:*", "matchCriteriaId": "8A004E65-AFA7-4551-BA2B-8EF9450B0684", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The (1) reports API and (2) administration feature in the comments API in the Ushahidi Platform before 2.5 do not require authentication, which allows remote attackers to generate reports and organize comments via API functions."}, {"lang": "es", "value": "El (1) Informe de la API y (2) la caracter\u00edstica de administraci\u00f3n de la API de comentarios en la plataforma de Ushahidi anterior a v2.5, no requieren de autenticaci\u00f3n, lo que permite a atacantes remotos generar informes y organizar los comentarios a trav\u00e9s de funciones de la API."}], "id": "CVE-2012-3473", "lastModified": "2012-08-13T17:54:29.490", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 6.4, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 4.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2012-08-12T21:55:01.590", "references": [{"source": "secalert@redhat.com", "url": "http://openwall.com/lists/oss-security/2012/08/09/5"}, {"source": "secalert@redhat.com", "tags": ["Exploit", "Patch"], "url": "https://github.com/ushahidi/Ushahidi_Web/commit/13ca6f4"}, {"source": "secalert@redhat.com", "tags": ["Patch"], "url": "https://github.com/ushahidi/Ushahidi_Web/commit/f67f4ad"}], "sourceIdentifier": "secalert@redhat.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-287"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}