CVE-2008-1627 CDS Invenio 0.92.1 and earlier allows remote authenticated users to delete email notification alerts of arbitrary users via a modified internal UID.
LowCVSS 3.5
EPSS 0.98%
- Published
- Updated
- Exploit status
- No public exploit known
Description
CDS Invenio 0.92.1 and earlier allows remote authenticated users to delete email notification alerts of arbitrary users via a modified internal UID.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cds software consortium invenio | <= 0.92.1 | No fix listed |
References
- cdsware.cern.ch patch
- cdsware.cern.ch patch
- 29521 patch third-party-advisory vendor-advisory
- 28514 vdb-entry
- cdsinvenio-alert-weak-security(41546) vdb-entry