CVE-2007-4427: Low severity Intersystems Cache Database vulnerability

Published Aug 20, 2007

Updated

Unspecified vulnerability in the login page redirection logic in the Cache' Server Page (CSP) implementation in InterSystems Cache' 2007.1.0.369.0 and 2007.1.1.420.0 allows remote authenticated users to modify data on a server, related to encoding of certain parameter values by this redirection logic, aka MAK2116.

Affected Software

2 affected components

Intersystems Cache Database=2007.1.1.420.0

Intersystems Cache Database=2007.1.0.369.0

Remediation

Patch Available

http://groups.google.com/group/intersystems-public-cache/browse_thread/thread/57d7c80dde26fda3/7845e246da5b095b

Event History

Aug 20, 2007

CVE Published

07:17 PM

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2007-4427?

CVE-2007-4427 is considered to be a medium severity vulnerability that allows remote authenticated users to modify data on a server.

How do I fix CVE-2007-4427?

To fix CVE-2007-4427, it is recommended to upgrade to a patched version of the InterSystems Cache product.

Who is affected by CVE-2007-4427?

CVE-2007-4427 affects users of InterSystems Cache versions 2007.1.0.369.0 and 2007.1.1.420.0.

What type of attack does CVE-2007-4427 allow?

CVE-2007-4427 allows authenticated users to exploit the vulnerability to perform unauthorized data modifications on the server.

Is CVE-2007-4427 publicly disclosed?

Yes, CVE-2007-4427 has been publicly disclosed and documented in security advisories.