{ "id": "CVE-2004-0709", "sourceIdentifier": "cve@mitre.org", "published": "2004-07-27T04:00:00.000", "lastModified": "2017-07-11T01:30:24.120", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { "lang": "en", "value": "HP OpenView Select Access 5.0 through 6.0 does not correctly decode UTF-8 encoded unicode characters in a URL, which could allow remote attackers to bypass access restrictions." }, { "lang": "es", "value": "HP OpenView Select Access 5.0 a 6.0 no decodifica correctamente caract\u00e9res unicode en una URL, lo que podr\u00eda permitir a atacantes remotos saltarse restricciones de acceso." } ], "metrics": { "cvssMetricV2": [ { "source": "nvd@nist.gov", "type": "Primary", "cvssData": { "version": "2.0", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector": "NETWORK", "accessComplexity": "LOW", "authentication": "NONE", "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "baseScore": 7.5 }, "baseSeverity": "HIGH", "exploitabilityScore": 10.0, "impactScore": 6.4, "acInsufInfo": false, "obtainAllPrivilege": false, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false } ] }, "weaknesses": [ { "source": "nvd@nist.gov", "type": "Primary", "description": [ { "lang": "en", "value": "NVD-CWE-Other" } ] } ], "configurations": [ { "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:a:hp:openview_select_access:5.0:patch_4:*:*:*:*:*:*", "matchCriteriaId": "312148B1-981A-425C-BD17-2F7C834F032B" }, { "vulnerable": true, "criteria": "cpe:2.3:a:hp:openview_select_access:5.1:patch_1:*:*:*:*:*:*", "matchCriteriaId": "31AA0DA8-52DA-403C-86E0-58973227F594" }, { "vulnerable": true, "criteria": "cpe:2.3:a:hp:openview_select_access:5.2:*:*:*:*:*:*:*", "matchCriteriaId": "83B8A16E-1B74-4E37-B72E-5A77BBCD2BD9" }, { "vulnerable": true, "criteria": "cpe:2.3:a:hp:openview_select_access:6.0:*:*:*:*:*:*:*", "matchCriteriaId": "0B944350-61B4-46BB-A240-301861954309" } ] } ] } ], "references": [ { "url": "http://www.kb.cert.org/vuls/id/205766", "source": "cve@mitre.org", "tags": [ "Patch", "Third Party Advisory", "US Government Resource" ] }, { "url": "http://www.securityfocus.com/advisories/6774", "source": "cve@mitre.org" }, { "url": "http://www.securityfocus.com/bid/10414", "source": "cve@mitre.org", "tags": [ "Patch", "Vendor Advisory" ] }, { "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16247", "source": "cve@mitre.org" } ] }