CVE-2007-4152

The Visionsoft Audit on Demand Service (VSAOD) in Visionsoft Audit 12.4.0.0 allows remote attackers to conduct replay attacks by capturing and resending data from the DETAILS and PROCESS sections of a session that schedules an audit.

CVSS v2.0 9.3 HIGH

9.3^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability : 8.6 / Impact : 10.0

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://osvdb.org/46980
http://www.portcullis.co.uk/uplds/advisories/vareplay%2006_044.txt	Vendor Advisory
http://www.securityfocus.com/bid/25153
http://osvdb.org/46980
http://www.portcullis.co.uk/uplds/advisories/vareplay%2006_044.txt	Vendor Advisory
http://www.securityfocus.com/bid/25153

Configurations

Configuration 1 (hide)

cpe:2.3:a:visionsoft:audit:12.4.0.0:*:*:*:*:*:*:*

History

No history.

Information

Published : 2007-08-03 20:17

Updated : 2025-04-09 00:30

NVD link : CVE-2007-4152

Mitre link : CVE-2007-4152

CVE.ORG link : CVE-2007-4152

JSON object : View

Products Affected

visionsoft

audit

CWE

NVD-CWE-Other

{"id": "CVE-2007-4152", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 9.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": true, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2007-08-03T20:17:00.000", "references": [{"url": "http://osvdb.org/46980", "source": "cve@mitre.org"}, {"url": "http://www.portcullis.co.uk/uplds/advisories/vareplay%2006_044.txt", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/25153", "source": "cve@mitre.org"}, {"url": "http://osvdb.org/46980", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.portcullis.co.uk/uplds/advisories/vareplay%2006_044.txt", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/25153", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "The Visionsoft Audit on Demand Service (VSAOD) in Visionsoft Audit 12.4.0.0 allows remote attackers to conduct replay attacks by capturing and resending data from the DETAILS and PROCESS sections of a session that schedules an audit."}, {"lang": "es", "value": "El Visionsoft Audit on Demand Service (VSAOD) en Visionsoft Audit 12.4.0.0 permite a atacantes remotos conducir ataques de repetici\u00f3n al capturar y re-enviar datos de las secciones DETAILS y PROCESS de una sesi\u00f3n que agenda un auditor\u00eda."}], "lastModified": "2025-04-09T00:30:58.490", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:visionsoft:audit:12.4.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "45C6DCDC-A0FF-46DD-81F2-A3B6062DA5F2"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}