CVE-2016-9081 - Vulnerability Details

Vendors	Products
Joomla	Joomla\!

Link	Providers
http://www.securityfocus.com/bid/93969
https://developer.joomla.org/security-centre/661-20161003-core-account-modifications.html

Show plain JSON

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2016-10-25T00:00:00", "descriptions": [{"lang": "en", "value": "Joomla! 3.4.4 through 3.6.3 allows attackers to reset username, password, and user group assignments and possibly perform other user account modifications via unspecified vectors."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-01-24T10:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "93969", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/93969"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://developer.joomla.org/security-centre/661-20161003-core-account-modifications.html"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2016-9081", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Joomla! 3.4.4 through 3.6.3 allows attackers to reset username, password, and user group assignments and possibly perform other user account modifications via unspecified vectors."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "93969", "refsource": "BID", "url": "http://www.securityfocus.com/bid/93969"}, {"name": "https://developer.joomla.org/security-centre/661-20161003-core-account-modifications.html", "refsource": "CONFIRM", "url": "https://developer.joomla.org/security-centre/661-20161003-core-account-modifications.html"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T02:42:10.972Z"}, "title": "CVE Program Container", "references": [{"name": "93969", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/93969"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://developer.joomla.org/security-centre/661-20161003-core-account-modifications.html"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2016-9081", "datePublished": "2017-01-23T21:00:00", "dateReserved": "2016-10-27T00:00:00", "dateUpdated": "2024-08-06T02:42:10.972Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

product : n/a (string)

vendor : n/a (string)

versions : [ »

0 : { »

status : affected (string)

version : n/a (string)

}

]

}

]

datePublic : 2016-10-25T00:00:00 (string)

descriptions : [ »

0 : { »

lang : en (string)

value : Joomla! 3.4.4 through 3.6.3 allows attackers to reset username, password, and user group assignments and possibly perform other user account modifications via unspecified vectors. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

description : n/a (string)

lang : en (string)

type : text (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2017-01-24T10:57:01 (string)

orgId : 8254265b-2729-46b6-b9e3-3dfca2d5bfca (string)

shortName : mitre (string)

}

references : [ »

0 : { »

name : 93969 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_BID (string)

]

url : http://www.securityfocus.com/bid/93969 (string)

}

1 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

]

url : https://developer.joomla.org/security-centre/661-20161003-core-account-modifications.html (string)

}

]

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : cve@mitre.org (string)

ID : CVE-2016-9081 (string)

STATE : PUBLIC (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : n/a (string)

version : { »

version_data : [ »

0 : { »

version_value : n/a (string)

}

]

}

]

}

vendor_name : n/a (string)

}

]

}

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : Joomla! 3.4.4 through 3.6.3 allows attackers to reset username, password, and user group assignments and possibly perform other user account modifications via unspecified vectors. (string)

}

]

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : n/a (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : 93969 (string)

refsource : BID (string)

url : http://www.securityfocus.com/bid/93969 (string)

}

1 : { »

name : https://developer.joomla.org/security-centre/661-20161003-core-account-modifications.html (string)

refsource : CONFIRM (string)

url : https://developer.joomla.org/security-centre/661-20161003-core-account-modifications.html (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-06T02:42:10.972Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

name : 93969 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_BID (string)

2 : x_transferred (string)

]

url : http://www.securityfocus.com/bid/93969 (string)

}

1 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

1 : x_transferred (string)

]

url : https://developer.joomla.org/security-centre/661-20161003-core-account-modifications.html (string)

}

]

}

]

}

cveMetadata : { »

assignerOrgId : 8254265b-2729-46b6-b9e3-3dfca2d5bfca (string)

assignerShortName : mitre (string)

cveId : CVE-2016-9081 (string)

datePublished : 2017-01-23T21:00:00 (string)

dateReserved : 2016-10-27T00:00:00 (string)

dateUpdated : 2024-08-06T02:42:10.972Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:joomla:joomla\\!:3.4.4:*:*:*:*:*:*:*", "matchCriteriaId": "98475DA0-9D72-4952-878B-4DD619132E66", "vulnerable": true}, {"criteria": "cpe:2.3:a:joomla:joomla\\!:3.4.5:*:*:*:*:*:*:*", "matchCriteriaId": "8D6C4C68-E526-408F-A54D-86CB3E5D800F", "vulnerable": true}, {"criteria": "cpe:2.3:a:joomla:joomla\\!:3.4.6:*:*:*:*:*:*:*", "matchCriteriaId": "CA0B678E-DB68-4F62-9E94-2A2D9053BCDF", "vulnerable": true}, {"criteria": "cpe:2.3:a:joomla:joomla\\!:3.4.7:*:*:*:*:*:*:*", "matchCriteriaId": "ED5427CD-4C44-4B6A-A72E-BF27BECFD631", "vulnerable": true}, {"criteria": "cpe:2.3:a:joomla:joomla\\!:3.4.8:*:*:*:*:*:*:*", "matchCriteriaId": "2FC7FF37-53BA-4DCB-B350-3D779977A853", "vulnerable": true}, {"criteria": "cpe:2.3:a:joomla:joomla\\!:3.4.8:rc:*:*:*:*:*:*", "matchCriteriaId": "44C6373A-1200-49D8-87B8-1D923752E04D", "vulnerable": true}, {"criteria": "cpe:2.3:a:joomla:joomla\\!:3.5.0:*:*:*:*:*:*:*", "matchCriteriaId": "76D4E968-72C3-40D1-A9E0-FC1C45513436", "vulnerable": true}, {"criteria": "cpe:2.3:a:joomla:joomla\\!:3.5.0:beta:*:*:*:*:*:*", "matchCriteriaId": "639BD6FA-F5A9-4D58-9FD0-F20610CFF48A", "vulnerable": true}, {"criteria": "cpe:2.3:a:joomla:joomla\\!:3.5.0:beta2:*:*:*:*:*:*", "matchCriteriaId": "871D0251-2BF5-4167-9B40-2D8024154802", "vulnerable": true}, {"criteria": "cpe:2.3:a:joomla:joomla\\!:3.5.0:beta3:*:*:*:*:*:*", "matchCriteriaId": "E59A3191-47BB-438D-87BC-74CB19DC99BA", "vulnerable": true}, {"criteria": "cpe:2.3:a:joomla:joomla\\!:3.5.0:beta4:*:*:*:*:*:*", "matchCriteriaId": "B36EC1DA-762B-4686-BE6E-6604D02F9FE3", "vulnerable": true}, {"criteria": "cpe:2.3:a:joomla:joomla\\!:3.5.0:beta5:*:*:*:*:*:*", "matchCriteriaId": "DB0FE2EA-51E5-43FE-8DEA-94EA8A016B6A", "vulnerable": true}, {"criteria": "cpe:2.3:a:joomla:joomla\\!:3.5.0:rc:*:*:*:*:*:*", "matchCriteriaId": "D5870A8F-914C-474F-BB4D-41F23061E1A4", "vulnerable": true}, {"criteria": "cpe:2.3:a:joomla:joomla\\!:3.5.0:rc2:*:*:*:*:*:*", "matchCriteriaId": "7945BC2A-0357-4E49-9314-C8C75B926585", "vulnerable": true}, {"criteria": "cpe:2.3:a:joomla:joomla\\!:3.5.0:rc3:*:*:*:*:*:*", "matchCriteriaId": "622CF895-3402-449F-A769-535ABD102D4B", "vulnerable": true}, {"criteria": "cpe:2.3:a:joomla:joomla\\!:3.5.0:rc4:*:*:*:*:*:*", "matchCriteriaId": "04E27344-9C09-4202-8AFD-D2ADD8294D5F", "vulnerable": true}, {"criteria": "cpe:2.3:a:joomla:joomla\\!:3.5.1:*:*:*:*:*:*:*", "matchCriteriaId": "91B37E54-0DCD-4A8B-83A0-3B14B962EBEA", "vulnerable": true}, {"criteria": "cpe:2.3:a:joomla:joomla\\!:3.5.1:rc:*:*:*:*:*:*", "matchCriteriaId": "76E37DC8-1D4D-4E82-BB27-F6B5B947C8E7", "vulnerable": true}, {"criteria": "cpe:2.3:a:joomla:joomla\\!:3.5.1:rc2:*:*:*:*:*:*", "matchCriteriaId": "75ECDB42-7E47-4ABC-8547-10091E9AFC5B", "vulnerable": true}, {"criteria": "cpe:2.3:a:joomla:joomla\\!:3.6.0:*:*:*:*:*:*:*", "matchCriteriaId": "AC7B9A2E-1D53-4F55-A021-4B28C1F95C0E", "vulnerable": true}, {"criteria": "cpe:2.3:a:joomla:joomla\\!:3.6.0:alpha:*:*:*:*:*:*", "matchCriteriaId": "5DCF94C1-7F4C-4F0D-973D-1A44F3CA2583", "vulnerable": true}, {"criteria": "cpe:2.3:a:joomla:joomla\\!:3.6.0:beta1:*:*:*:*:*:*", "matchCriteriaId": "C9F3AD2F-5503-4A6A-BF32-6B570F5C383E", "vulnerable": true}, {"criteria": "cpe:2.3:a:joomla:joomla\\!:3.6.0:beta2:*:*:*:*:*:*", "matchCriteriaId": "F86FF086-3D89-4350-92BC-8914ACD471A0", "vulnerable": true}, {"criteria": "cpe:2.3:a:joomla:joomla\\!:3.6.0:rc:*:*:*:*:*:*", "matchCriteriaId": "352A89E4-8031-4AF7-8A57-A4BDF72FE56E", "vulnerable": true}, {"criteria": "cpe:2.3:a:joomla:joomla\\!:3.6.0:rc2:*:*:*:*:*:*", "matchCriteriaId": "BC86535F-D1AE-4F4C-8B2D-6418D789CA08", "vulnerable": true}, {"criteria": "cpe:2.3:a:joomla:joomla\\!:3.6.1:*:*:*:*:*:*:*", "matchCriteriaId": "003DBC50-8865-4704-BC79-1D945499BEF5", "vulnerable": true}, {"criteria": "cpe:2.3:a:joomla:joomla\\!:3.6.1:rc1:*:*:*:*:*:*", "matchCriteriaId": "F05F8CEE-67F3-4868-87A6-E9DBAE70AA8F", "vulnerable": true}, {"criteria": "cpe:2.3:a:joomla:joomla\\!:3.6.1:rc2:*:*:*:*:*:*", "matchCriteriaId": "72C3D2D6-BCC8-4381-B941-09FE693B8AD3", "vulnerable": true}, {"criteria": "cpe:2.3:a:joomla:joomla\\!:3.6.2:*:*:*:*:*:*:*", "matchCriteriaId": "3A79B694-384E-4DDD-9AE5-DFFF1E695BA7", "vulnerable": true}, {"criteria": "cpe:2.3:a:joomla:joomla\\!:3.6.3:*:*:*:*:*:*:*", "matchCriteriaId": "2F3C0F39-B5FD-409C-8AA1-720720704952", "vulnerable": true}, {"criteria": "cpe:2.3:a:joomla:joomla\\!:3.6.3:rc1:*:*:*:*:*:*", "matchCriteriaId": "53190951-2DCC-4B00-A921-8F77A044FD78", "vulnerable": true}, {"criteria": "cpe:2.3:a:joomla:joomla\\!:3.6.3:rc2:*:*:*:*:*:*", "matchCriteriaId": "77138C7E-04FE-4442-AEF9-BE8EB68F5ECC", "vulnerable": true}, {"criteria": "cpe:2.3:a:joomla:joomla\\!:3.6.3:rc3:*:*:*:*:*:*", "matchCriteriaId": "5A0C7A46-1EF2-4DD4-991E-F120F994161C", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Joomla! 3.4.4 through 3.6.3 allows attackers to reset username, password, and user group assignments and possibly perform other user account modifications via unspecified vectors."}, {"lang": "es", "value": "Joomla! 3.4.4 hasta la versi\u00f3n 3.6.3 permite a atacantes restablecer nombre de usuario, contrase\u00f1a y asignaciones de grupo de usuarios y posiblemente realizar otras modificaciones de cuentas de usuario a trav\u00e9s de vectores no especificados."}], "id": "CVE-2016-9081", "lastModified": "2024-11-21T03:00:33.920", "metrics": {"cvssMetricV2": [{"acInsufInfo": true, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2017-01-23T21:59:02.673", "references": [{"source": "cve@mitre.org", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/93969"}, {"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "https://developer.joomla.org/security-centre/661-20161003-core-account-modifications.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/93969"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "https://developer.joomla.org/security-centre/661-20161003-core-account-modifications.html"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-255"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:joomla:joomla\!:3.4.4:*:*:*:*:*:*:* (string)

matchCriteriaId : 98475DA0-9D72-4952-878B-4DD619132E66 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:joomla:joomla\!:3.4.5:*:*:*:*:*:*:* (string)

matchCriteriaId : 8D6C4C68-E526-408F-A54D-86CB3E5D800F (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:joomla:joomla\!:3.4.6:*:*:*:*:*:*:* (string)

matchCriteriaId : CA0B678E-DB68-4F62-9E94-2A2D9053BCDF (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:joomla:joomla\!:3.4.7:*:*:*:*:*:*:* (string)

matchCriteriaId : ED5427CD-4C44-4B6A-A72E-BF27BECFD631 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:joomla:joomla\!:3.4.8:*:*:*:*:*:*:* (string)

matchCriteriaId : 2FC7FF37-53BA-4DCB-B350-3D779977A853 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:joomla:joomla\!:3.4.8:rc:*:*:*:*:*:* (string)

matchCriteriaId : 44C6373A-1200-49D8-87B8-1D923752E04D (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:joomla:joomla\!:3.5.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 76D4E968-72C3-40D1-A9E0-FC1C45513436 (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:a:joomla:joomla\!:3.5.0:beta:*:*:*:*:*:* (string)

matchCriteriaId : 639BD6FA-F5A9-4D58-9FD0-F20610CFF48A (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:a:joomla:joomla\!:3.5.0:beta2:*:*:*:*:*:* (string)

matchCriteriaId : 871D0251-2BF5-4167-9B40-2D8024154802 (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:a:joomla:joomla\!:3.5.0:beta3:*:*:*:*:*:* (string)

matchCriteriaId : E59A3191-47BB-438D-87BC-74CB19DC99BA (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:a:joomla:joomla\!:3.5.0:beta4:*:*:*:*:*:* (string)

matchCriteriaId : B36EC1DA-762B-4686-BE6E-6604D02F9FE3 (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:a:joomla:joomla\!:3.5.0:beta5:*:*:*:*:*:* (string)

matchCriteriaId : DB0FE2EA-51E5-43FE-8DEA-94EA8A016B6A (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:a:joomla:joomla\!:3.5.0:rc:*:*:*:*:*:* (string)

matchCriteriaId : D5870A8F-914C-474F-BB4D-41F23061E1A4 (string)

vulnerable : true (boolean)

}

13 : { »

criteria : cpe:2.3:a:joomla:joomla\!:3.5.0:rc2:*:*:*:*:*:* (string)

matchCriteriaId : 7945BC2A-0357-4E49-9314-C8C75B926585 (string)

vulnerable : true (boolean)

}

14 : { »

criteria : cpe:2.3:a:joomla:joomla\!:3.5.0:rc3:*:*:*:*:*:* (string)

matchCriteriaId : 622CF895-3402-449F-A769-535ABD102D4B (string)

vulnerable : true (boolean)

}

15 : { »

criteria : cpe:2.3:a:joomla:joomla\!:3.5.0:rc4:*:*:*:*:*:* (string)

matchCriteriaId : 04E27344-9C09-4202-8AFD-D2ADD8294D5F (string)

vulnerable : true (boolean)

}

16 : { »

criteria : cpe:2.3:a:joomla:joomla\!:3.5.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 91B37E54-0DCD-4A8B-83A0-3B14B962EBEA (string)

vulnerable : true (boolean)

}

17 : { »

criteria : cpe:2.3:a:joomla:joomla\!:3.5.1:rc:*:*:*:*:*:* (string)

matchCriteriaId : 76E37DC8-1D4D-4E82-BB27-F6B5B947C8E7 (string)

vulnerable : true (boolean)

}

18 : { »

criteria : cpe:2.3:a:joomla:joomla\!:3.5.1:rc2:*:*:*:*:*:* (string)

matchCriteriaId : 75ECDB42-7E47-4ABC-8547-10091E9AFC5B (string)

vulnerable : true (boolean)

}

19 : { »

criteria : cpe:2.3:a:joomla:joomla\!:3.6.0:*:*:*:*:*:*:* (string)

matchCriteriaId : AC7B9A2E-1D53-4F55-A021-4B28C1F95C0E (string)

vulnerable : true (boolean)

}

20 : { »

criteria : cpe:2.3:a:joomla:joomla\!:3.6.0:alpha:*:*:*:*:*:* (string)

matchCriteriaId : 5DCF94C1-7F4C-4F0D-973D-1A44F3CA2583 (string)

vulnerable : true (boolean)

}

21 : { »

criteria : cpe:2.3:a:joomla:joomla\!:3.6.0:beta1:*:*:*:*:*:* (string)

matchCriteriaId : C9F3AD2F-5503-4A6A-BF32-6B570F5C383E (string)

vulnerable : true (boolean)

}

22 : { »

criteria : cpe:2.3:a:joomla:joomla\!:3.6.0:beta2:*:*:*:*:*:* (string)

matchCriteriaId : F86FF086-3D89-4350-92BC-8914ACD471A0 (string)

vulnerable : true (boolean)

}

23 : { »

criteria : cpe:2.3:a:joomla:joomla\!:3.6.0:rc:*:*:*:*:*:* (string)

matchCriteriaId : 352A89E4-8031-4AF7-8A57-A4BDF72FE56E (string)

vulnerable : true (boolean)

}

24 : { »

criteria : cpe:2.3:a:joomla:joomla\!:3.6.0:rc2:*:*:*:*:*:* (string)

matchCriteriaId : BC86535F-D1AE-4F4C-8B2D-6418D789CA08 (string)

vulnerable : true (boolean)

}

25 : { »

criteria : cpe:2.3:a:joomla:joomla\!:3.6.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 003DBC50-8865-4704-BC79-1D945499BEF5 (string)

vulnerable : true (boolean)

}

26 : { »

criteria : cpe:2.3:a:joomla:joomla\!:3.6.1:rc1:*:*:*:*:*:* (string)

matchCriteriaId : F05F8CEE-67F3-4868-87A6-E9DBAE70AA8F (string)

vulnerable : true (boolean)

}

27 : { »

criteria : cpe:2.3:a:joomla:joomla\!:3.6.1:rc2:*:*:*:*:*:* (string)

matchCriteriaId : 72C3D2D6-BCC8-4381-B941-09FE693B8AD3 (string)

vulnerable : true (boolean)

}

28 : { »

criteria : cpe:2.3:a:joomla:joomla\!:3.6.2:*:*:*:*:*:*:* (string)

matchCriteriaId : 3A79B694-384E-4DDD-9AE5-DFFF1E695BA7 (string)

vulnerable : true (boolean)

}

29 : { »

criteria : cpe:2.3:a:joomla:joomla\!:3.6.3:*:*:*:*:*:*:* (string)

matchCriteriaId : 2F3C0F39-B5FD-409C-8AA1-720720704952 (string)

vulnerable : true (boolean)

}

30 : { »

criteria : cpe:2.3:a:joomla:joomla\!:3.6.3:rc1:*:*:*:*:*:* (string)

matchCriteriaId : 53190951-2DCC-4B00-A921-8F77A044FD78 (string)

vulnerable : true (boolean)

}

31 : { »

criteria : cpe:2.3:a:joomla:joomla\!:3.6.3:rc2:*:*:*:*:*:* (string)

matchCriteriaId : 77138C7E-04FE-4442-AEF9-BE8EB68F5ECC (string)

vulnerable : true (boolean)

}

32 : { »

criteria : cpe:2.3:a:joomla:joomla\!:3.6.3:rc3:*:*:*:*:*:* (string)

matchCriteriaId : 5A0C7A46-1EF2-4DD4-991E-F120F994161C (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : Joomla! 3.4.4 through 3.6.3 allows attackers to reset username, password, and user group assignments and possibly perform other user account modifications via unspecified vectors. (string)

}

1 : { »

lang : es (string)

value : Joomla! 3.4.4 hasta la versión 3.6.3 permite a atacantes restablecer nombre de usuario, contraseña y asignaciones de grupo de usuarios y posiblemente realizar otras modificaciones de cuentas de usuario a través de vectores no especificados. (string)

}

]

id : CVE-2016-9081 (string)

lastModified : 2024-11-21T03:00:33.920 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : true (boolean)

baseSeverity : HIGH (string)

cvssData : { »

accessComplexity : LOW (string)

accessVector : NETWORK (string)

authentication : NONE (string)

availabilityImpact : PARTIAL (string)

baseScore : 7.5 (number)

confidentialityImpact : PARTIAL (string)

integrityImpact : PARTIAL (string)

vectorString : AV:N/AC:L/Au:N/C:P/I:P/A:P (string)

version : 2.0 (string)

}

exploitabilityScore : 10 (number)

impactScore : 6.4 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : false (boolean)

}

]

cvssMetricV30 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 9.8 (number)

baseSeverity : CRITICAL (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (string)

version : 3.0 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 5.9 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2017-01-23T21:59:02.673 (string)

references : [ »

0 : { »

source : cve@mitre.org (string)

tags : [ »

0 : Third Party Advisory (string)

1 : VDB Entry (string)

]

url : http://www.securityfocus.com/bid/93969 (string)

}

1 : { »

source : cve@mitre.org (string)

tags : [ »

0 : Patch (string)

1 : Vendor Advisory (string)

]

url : https://developer.joomla.org/security-centre/661-20161003-core-account-modifications.html (string)

}

2 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Third Party Advisory (string)

1 : VDB Entry (string)

]

url : http://www.securityfocus.com/bid/93969 (string)

}

3 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Patch (string)

1 : Vendor Advisory (string)

]

url : https://developer.joomla.org/security-centre/661-20161003-core-account-modifications.html (string)

}

]

sourceIdentifier : cve@mitre.org (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-255 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object