CVE-2009-2344

The web-based management interfaces in Sourcefire Defense Center (DC) and 3D Sensor before 4.8.2 allow remote authenticated users to gain privileges via a $admin value for the admin parameter in an edit action to admin/user/user.cgi and unspecified other components.

CVSS v2.0

9.0 HIGHAV:N/AC:L/Au:S/C:C/I:C/A:C

EPSS

9.25% chance of exploitation in the next 30 days, 95th percentile

Published

2009-07-07

Updated

2024-08-07

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/9074

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/9074

References

• CVE Record
• NVD entry

Related

• CVE-2009-2341
• CVE-2009-2350
• CVE-2009-2340
• CVE-2009-2352
• CVE-2009-2339
• CVE-2009-2360