CVEvulnerability
CVE-2009-1055
4.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-03-24
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
Description
Unspecified vulnerability in the web service in Sitecore CMS 5.3.1 rev. 071114 allows remote authenticated users to gain access to security databases, and obtain administrative and user credentials, via unknown vectors related to SOAP and XML requests.
Affected configurations
• sitecore cms 5.3.0
• sitecore cms 5.3.1
References
- http://sdn5.sitecore.net/Products/Sitecore%20V5/Sitecore%20CMS%205%2C-d-%2C3/ReleaseNotes/V5%2C-d-%2C3%2C-d-%2C2/ChangeLog.aspx sdn5.sitecore.net
- http://secunia.com/advisories/34356 Vendor Advisory
- http://www.securityfocus.com/archive/1/501929/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/34162 www.securityfocus.com
- http://www.vupen.com/english/advisories/2009/0753 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49298 exchange.xforce.ibmcloud.com
- http://sdn5.sitecore.net/Products/Sitecore%20V5/Sitecore%20CMS%205%2C-d-%2C3/ReleaseNotes/V5%2C-d-%2C3%2C-d-%2C2/ChangeLog.aspx sdn5.sitecore.net
- http://secunia.com/advisories/34356 Vendor Advisory
- http://www.securityfocus.com/archive/1/501929/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/34162 www.securityfocus.com
- http://www.vupen.com/english/advisories/2009/0753 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49298 exchange.xforce.ibmcloud.com