VulnerabilityModified
CVE-2001-1367
The checkAccess function in PHPSlice 0.1.4, and all other versions between 0.1.1 and 0.1.6, does not properly verify the administrative access level, which could allow remote attackers to gain privileges.
HIGH 10.0EPSS 2.44%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (2.44%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
The checkAccess function in PHPSlice 0.1.4, and all other versions between 0.1.1 and 0.1.6, does not properly verify the administrative access level, which could allow remote attackers to gain privileges.
- CVSS 2.0
- 10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
- EPSS
- 2.44% probability · 83th percentile
- CISA KEV
- Not listed
- Affected
- phpslice/phpslice
- Source
- cve@mitre.org
References
- http://archives.neohapsis.com/archives/vulnwatch/2001-q3/0005.htmlVendor Advisory
- http://phpslice.org/comments.php?aid=1031&URL Repurposed
- https://exchange.xforce.ibmcloud.com/vulnerabilities/9649
- http://archives.neohapsis.com/archives/vulnwatch/2001-q3/0005.htmlVendor Advisory
- http://phpslice.org/comments.php?aid=1031&URL Repurposed
- https://exchange.xforce.ibmcloud.com/vulnerabilities/9649
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.