CVE-2015-2952 The user-information management functionality in Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote authenticated users to bypass intended access restrictions and....
MediumCVSS 6.5
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The user-information management functionality in Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote authenticated users to bypass intended access restrictions and modify administrative credentials via unspecified vectors, a different vulnerability than CVE-2015-2953 and CVE-2015-2958.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| igreks milkystep light | <= 0.94 | No fix listed |
| igreks milkystep professional | <= 1.82 | No fix listed |
| igreks milkystep professional oem | <= 1.82 | No fix listed |
References
- jvn.jp
- JVN#19732015 third-party-advisory vendor-advisory
- JVNDB-2015-000077 third-party-advisory vendor-advisory
- 75184 vdb-entry