{
  "id": "CVE-2011-4311",
  "sourceIdentifier": "secalert@redhat.com",
  "published": "2011-11-19T03:58:55.680",
  "lastModified": "2024-11-21T01:32:12.710",
  "vulnStatus": "Modified",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "ResourceSpace before 4.2.2833 does not properly validate access keys, which allows remote attackers to bypass intended resource restrictions via unspecified vectors."
    },
    {
      "lang": "es",
      "value": "ResourceSpace antes de v4.02.2833 no valida correctamente las claves de acceso, lo que permite a atacantes remotos evitar las restricciones de los recursos a trav\u00e9s de vectores no especificados."
    }
  ],
  "metrics": {
    "cvssMetricV2": [
      {
        "source": "nvd@nist.gov",
        "type": "Primary",
        "cvssData": {
          "version": "2.0",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N",
          "baseScore": 5.0,
          "accessVector": "NETWORK",
          "accessComplexity": "LOW",
          "authentication": "NONE",
          "confidentialityImpact": "NONE",
          "integrityImpact": "PARTIAL",
          "availabilityImpact": "NONE"
        },
        "baseSeverity": "MEDIUM",
        "exploitabilityScore": 10.0,
        "impactScore": 2.9,
        "acInsufInfo": false,
        "obtainAllPrivilege": false,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "weaknesses": [
    {
      "source": "nvd@nist.gov",
      "type": "Primary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:montala:resourcespace:*:*:*:*:*:*:*:*",
              "versionEndIncluding": "4.2.2816",
              "matchCriteriaId": "C38AE3CB-68EB-4912-A511-4A63E8E5A4A0"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:montala:resourcespace:2.2.1240:*:*:*:*:*:*:*",
              "matchCriteriaId": "52AD45F5-445F-4FCB-956A-4CF9D5F40F5C"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:montala:resourcespace:2.3.1374:*:*:*:*:*:*:*",
              "matchCriteriaId": "957E93D7-8A99-4833-ACCF-B962F5230521"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:montala:resourcespace:3.0.1490:*:*:*:*:*:*:*",
              "matchCriteriaId": "F31881B6-CDE6-4FD1-B478-9E68D12EF7ED"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:montala:resourcespace:3.1.1557:*:*:*:*:*:*:*",
              "matchCriteriaId": "D941F016-7159-40F1-9766-DD35BDAFF845"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:montala:resourcespace:3.2.1651:*:*:*:*:*:*:*",
              "matchCriteriaId": "94250016-6E5E-4E19-BD3C-582A0C4635DA"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:montala:resourcespace:3.3.1723:*:*:*:*:*:*:*",
              "matchCriteriaId": "758FD1C3-386A-4023-9071-4D586B5CE101"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:montala:resourcespace:3.4.1794:*:*:*:*:*:*:*",
              "matchCriteriaId": "17D3EE93-8486-4160-9D48-AE5B59BA4249"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:montala:resourcespace:3.5.1857:*:*:*:*:*:*:*",
              "matchCriteriaId": "1EAB3221-8A15-4C92-A43E-9122F067E9B7"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:montala:resourcespace:3.6.2022:*:*:*:*:*:*:*",
              "matchCriteriaId": "2450ACA2-D216-4AF1-9578-D602D4901AB8"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:montala:resourcespace:3.7.2088:*:*:*:*:*:*:*",
              "matchCriteriaId": "2C86694B-12A0-4AA8-899D-F0990EA8C9B9"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:montala:resourcespace:3.8.2144:*:*:*:*:*:*:*",
              "matchCriteriaId": "638866F8-C485-4927-8034-1944779392AC"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:montala:resourcespace:3.9.2269:*:*:*:*:*:*:*",
              "matchCriteriaId": "60685610-36EC-4388-904C-506A003C819A"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:montala:resourcespace:4.0.2429:*:*:*:*:*:*:*",
              "matchCriteriaId": "21AD3E99-4807-4568-B68F-A56B3B18547C"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:montala:resourcespace:4.1.2567:*:*:*:*:*:*:*",
              "matchCriteriaId": "80269ABE-3407-46AF-A76B-C15893D08073"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "http://openwall.com/lists/oss-security/2011/11/13/2",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://openwall.com/lists/oss-security/2011/11/14/3",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.resourcespace.org/download.php",
      "source": "secalert@redhat.com",
      "tags": [
        "Patch"
      ]
    },
    {
      "url": "http://openwall.com/lists/oss-security/2011/11/13/2",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://openwall.com/lists/oss-security/2011/11/14/3",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.resourcespace.org/download.php",
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ]
    }
  ]
}