{
  "id": "CVE-2011-2674",
  "sourceIdentifier": "vultures@jpcert.or.jp",
  "published": "2011-10-02T02:53:33.790",
  "lastModified": "2021-07-15T14:23:30.353",
  "vulnStatus": "Analyzed",
  "descriptions": [
    {
      "lang": "en",
      "value": "BaserCMS before 1.6.12 does not properly restrict additions to the membership of the operators group, which allows remote authenticated users to gain privileges via unspecified vectors."
    },
    {
      "lang": "es",
      "value": "BaserCMS anterior a v1.6.12 no restringe adecuadamente las adiciones a los miembros del grupo de operadores, lo que permite a usuarios remotos autenticados obtener privilegios mediante vectores no especificados."
    }
  ],
  "metrics": {
    "cvssMetricV2": [
      {
        "source": "nvd@nist.gov",
        "type": "Primary",
        "cvssData": {
          "version": "2.0",
          "vectorString": "AV:N/AC:M/Au:S/C:P/I:P/A:N",
          "accessVector": "NETWORK",
          "accessComplexity": "MEDIUM",
          "authentication": "SINGLE",
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "availabilityImpact": "NONE",
          "baseScore": 4.9
        },
        "baseSeverity": "MEDIUM",
        "exploitabilityScore": 6.8,
        "impactScore": 4.9,
        "acInsufInfo": false,
        "obtainAllPrivilege": false,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ]
  },
  "weaknesses": [
    {
      "source": "nvd@nist.gov",
      "type": "Primary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:basercms:basercms:*:*:*:*:*:*:*:*",
              "versionEndIncluding": "1.6.11.4",
              "matchCriteriaId": "D1123FD1-A332-463A-A098-6935962F305F"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:basercms:basercms:1.5.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "24D12EBB-50CA-4491-98CF-1D78F4DCEBC5"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:basercms:basercms:1.5.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "CA5D363F-B372-4858-A05D-4DF7128E9B30"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:basercms:basercms:1.5.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "B23DD28B-4026-49DA-8ED2-958C2D413743"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:basercms:basercms:1.5.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "017C1673-F9F3-4F6F-94FE-086726A5DD86"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:basercms:basercms:1.5.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "2FA3FCED-8667-49E3-BF87-C6C053CE509B"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:basercms:basercms:1.5.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "DFE4A6DD-E864-4C93-A378-013E6BCDC2EA"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:basercms:basercms:1.6.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "FDF547F8-8D6B-451B-9855-5CB54265361B"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:basercms:basercms:1.6.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "725389EC-421C-49FF-9E1B-983EBD461395"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:basercms:basercms:1.6.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "84740A0A-E240-4918-8560-A47B6C763794"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:basercms:basercms:1.6.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "CD1B50C5-2103-48C4-B722-02ECEEF4A57E"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:basercms:basercms:1.6.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "2AC3ABEA-A1D5-4CAE-BE39-5B5E13D8D864"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:basercms:basercms:1.6.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "72258051-C4CB-48A5-ABA6-800B905B262C"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:basercms:basercms:1.6.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "80B26377-F7DF-49B9-8B9A-A85A9DB7752E"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:basercms:basercms:1.6.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "BDF17F32-1264-45FD-B75B-936129D47F0E"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:basercms:basercms:1.6.7.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "D767AF3D-CA44-45CD-96F9-E3F52F685876"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:basercms:basercms:1.6.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "B8B0526C-C10F-4500-89E0-CD73D1B5D37E"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:basercms:basercms:1.6.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "850934DF-8CCE-4F37-B68A-1DA78E02729C"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:basercms:basercms:1.6.9.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "EE109C1E-7BBF-4A74-ADDF-934DD043A021"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:basercms:basercms:1.6.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "3146BD38-B48F-459B-87A1-9766AC0EFD9C"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:basercms:basercms:1.6.11:*:*:*:*:*:*:*",
              "matchCriteriaId": "9A6F0689-8AB7-4333-8344-36CD3214836F"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:basercms:basercms:1.6.11.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "0391BCBC-E09C-44FC-8BE4-F9DEB162EB24"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:basercms:basercms:1.6.11.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "7DC8C543-8332-43E1-BC0D-5B26DB08DD11"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:basercms:basercms:1.6.11.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "83269CF4-4C66-4BB0-AE16-AE4D19ED6702"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "http://basercms.net/patch/JVN09789751",
      "source": "vultures@jpcert.or.jp"
    },
    {
      "url": "http://jvn.jp/en/jp/JVN16617002/index.html",
      "source": "vultures@jpcert.or.jp"
    },
    {
      "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2011-000066",
      "source": "vultures@jpcert.or.jp"
    }
  ]
}