CVE-2006-3147
Unspecified vulnerability in Hosting Controller before 6.1 (aka Hotfix 3.2) allows remote authenticated attackers to gain host admin privileges, list all resellers, or change resellers' passwords via unspecified vectors.
Does this matter?
Lower severity and a low EPSS score (2.67%). Track it; it rarely justifies an emergency change on its own.
Description
Unspecified vulnerability in Hosting Controller before 6.1 (aka Hotfix 3.2) allows remote authenticated attackers to gain host admin privileges, list all resellers, or change resellers' passwords via unspecified vectors. NOTE: due to the lack of precise details, it is not clear whether this is related to a previously disclosed issue such as CVE-2005-1788.
- CVSS 2.0
- 6.5 MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P
- EPSS
- 2.67% probability · 85th percentile
- CISA KEV
- Not listed
- Affected
- hosting controller/hosting controller
- Source
- cve@mitre.org
References
- http://hostingcontroller.com/english/logs/hotfixlogv61_3_2.htmlPatch
- http://secunia.com/advisories/20743Patch, Vendor Advisory
- http://securitytracker.com/id?1016444
- http://www.osvdb.org/26693
- http://www.securityfocus.com/bid/18565
- http://www.vupen.com/english/advisories/2006/2459
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27340
- http://hostingcontroller.com/english/logs/hotfixlogv61_3_2.htmlPatch
- http://secunia.com/advisories/20743Patch, Vendor Advisory
- http://securitytracker.com/id?1016444
- http://www.osvdb.org/26693
- http://www.securityfocus.com/bid/18565
- http://www.vupen.com/english/advisories/2006/2459
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27340
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.