CVE-2007-2912: Medium severity Jelsoft vBulletin vulnerability
Published May 30, 2007
·Updated
Unspecified vulnerability in Jelsoft vBulletin before 3.6.6, when unauthenticated User Infraction Permissions is disabled, allows remote attackers to see the infraction "red flag" for a deleted user.
Affected Software
1 affected component
Jelsoft vBulletin<=3.6.4
Event History
May 30, 2007
CVE Published
10:30 AM
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-2912?
CVE-2007-2912 is considered a low-severity vulnerability due to its limited exploitability.
2
How do I fix CVE-2007-2912?
To address CVE-2007-2912, upgrade vBulletin to version 3.6.6 or later.
3
What does CVE-2007-2912 affect?
CVE-2007-2912 affects vBulletin versions prior to 3.6.6 regarding user infraction information.
4
Can CVE-2007-2912 be exploited remotely?
Yes, CVE-2007-2912 can be exploited remotely by attackers with knowledge of the vulnerability.
5
What is the impact of CVE-2007-2912?
The impact of CVE-2007-2912 allows attackers to view infraction notifications for deleted users.