CVE-2010-4506

Published: Feb 7, 2011Modified: Apr 29, 2026

6.2

Vector

AV:L/AC:H/Au:N/C:C/I:C/A:C

Exploitability: 1.9 / Impact: 10.0

Source: NVD

Description

Passlogix v-GO Self-Service Password Reset (SSPR) and OEM before 7.0A allows physically proximate attackers to execute arbitrary programs without authentication by triggering use of an invalid SSL certificate and using the Internet Explorer interface to navigate through the filesystem via a "Save As" dialog that is reachable from the "Certificate Export" wizard.

Affected (1)

Products: Oracle: Passlogix V Go Self Service Password Reset And Oem

1 product

Passlogix V Go Self Service Password Reset And Oem

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Oracle Passlogix V Go Self Service Password Reset And Oem	Version 7.0

Related CWEs

References (8)

http://securityreason.com/securityalert/8065

Source: cve@mitre.org

http://www.securityfocus.com/bid/46452

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/65439

Source: cve@mitre.org

https://www.trustwave.com/spiderlabs/advisories/TWSL2010-007.txt

Source: cve@mitre.org

http://securityreason.com/securityalert/8065

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/46452

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/65439

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.trustwave.com/spiderlabs/advisories/TWSL2010-007.txt

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.