CVE-2008-1475

The xml-rpc server in Roundup 1.4.4 does not check property permissions, which allows attackers to bypass restrictions and edit or read restricted properties…

published March 24, 2008

CVSS
—
EPSS
2%
Percentile
77.6
In the wild
Unconfirmed
What it is

The xml-rpc server in Roundup 1.4.4 does not check property permissions, which allows attackers to bypass restrictions and edit or read restricted properties via the (1) list, (2) display, and (3) set methods.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01758 · 77.6th percentile
Published
2008-03-24T22:00Z
EPSS history
Timeline
  • 24 MAR 22:00Z
    The xml-rpc server in Roundup 1.4.4 does not check property permissions, which allows attackers to bypass restrictions and edit or read restricted properties…
    cvelistv5