CVEvulnerability
CVE-2010-1040
5.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2010-03-23
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:N
- Weaknesses
- CWE-287
Description
The "IP address range limitation" function in OpenPNE 1.6 through 1.8, 2.0 through 2.8, 2.10 through 2.14, and 3.0 through 3.4, when mobile device support is enabled, allows remote attackers to bypass the "simple login" functionality via unknown vectors related to spoofing.
Affected configurations
• tejimaya openpne 1.6
• tejimaya openpne 1.8
• tejimaya openpne 2.3.0
• tejimaya openpne 2.3.1
• tejimaya openpne 2.3.3
• tejimaya openpne 2.3.4
• tejimaya openpne 2.4.0
• tejimaya openpne 2.4.1
• tejimaya openpne 2.4.2
• tejimaya openpne 2.4.3
• tejimaya openpne 2.4.4
• tejimaya openpne 2.4.5
• tejimaya openpne 2.4.6
• tejimaya openpne 2.4.7
• tejimaya openpne 2.4.8
• tejimaya openpne 2.4.8.1
• tejimaya openpne 2.5.0
• tejimaya openpne 2.5.1
• tejimaya openpne 2.5.2
• tejimaya openpne 2.5.3
• tejimaya openpne 2.5.4
• tejimaya openpne 2.5.5
• tejimaya openpne 2.5.6
• tejimaya openpne 2.5.8
• tejimaya openpne 2.6.0
• tejimaya openpne 2.6.1
• tejimaya openpne 2.6.2
• tejimaya openpne 2.6.3
• tejimaya openpne 2.6.4
• tejimaya openpne 2.6.5
• tejimaya openpne 2.6.6
• tejimaya openpne 2.6.6.1
• tejimaya openpne 2.6.6.2
• tejimaya openpne 2.6.7
• tejimaya openpne 2.6.8
• tejimaya openpne 2.6.9
• tejimaya openpne 2.6.10
• tejimaya openpne 2.6.11.1
• tejimaya openpne 2.7.0
• tejimaya openpne 2.7.1
• tejimaya openpne 2.7.2
• tejimaya openpne 2.7.3
• tejimaya openpne 2.7.4
• tejimaya openpne 2.8.0
• tejimaya openpne 2.10.0
• tejimaya openpne 2.10.1
• tejimaya openpne 2.10.2
• tejimaya openpne 2.10.3
• tejimaya openpne 2.10.4
• tejimaya openpne 2.10.4.1
• tejimaya openpne 2.10.4.2
• tejimaya openpne 2.10.5
• tejimaya openpne 2.10.5.1
• tejimaya openpne 2.10.6
• tejimaya openpne 2.10.7
• tejimaya openpne 2.10.8
• tejimaya openpne 2.10.9
• tejimaya openpne 2.10.10
• tejimaya openpne 2.10.11
• tejimaya openpne 2.10.12
… and 42 more
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- http://jvn.jp/en/jp/JVN06874657/index.html jvn.jp
- http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000006.html jvndb.jvn.jp
- http://secunia.com/advisories/38857 Vendor Advisory
- http://www.ipa.go.jp/security/vuln/alert/201003_openpne.html www.ipa.go.jp
- http://www.openpne.jp/archives/4612/ Vendor Advisory
- http://jvn.jp/en/jp/JVN06874657/index.html jvn.jp
- http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000006.html jvndb.jvn.jp
- http://secunia.com/advisories/38857 Vendor Advisory
- http://www.ipa.go.jp/security/vuln/alert/201003_openpne.html www.ipa.go.jp
- http://www.openpne.jp/archives/4612/ Vendor Advisory