What is CVE-2009-5068?

CVE-2009-5068 is a high-severity vulnerability in Simplemachines Simple_machines_forum, classified under Cleartext Storage of Sensitive Information. CVSS score: 7.2/10. Published 2020-01-15.

How severe is CVE-2009-5068?

High severity. CVSS v3 base score is 7.2 out of 10.

Vulnerability in Simplemachines Simple_machines_forum

CVE-2009-5068

There is a file disclosure vulnerability in SMF (Simple Machines Forum) affecting versions through v2.0.3. On some configurations a SMF deployment is shared by several "co-admins" that are not trusted beyond the SMF deployment. This vulner…

EPSS: 0.017 (74.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.

Affected products

Simplemachines Simple_machines_forum
Smf — versions through 2.0.3

Weakness classification (CWE)

CWE-312 — Cleartext Storage of Sensitive Information

References

secalert@redhat.com (Mailing List, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2009-5068?: CVE-2009-5068 is a high-severity vulnerability in Simplemachines Simple_machines_forum, classified under Cleartext Storage of Sensitive Information. CVSS score: 7.2/10. Published 2020-01-15.
How severe is CVE-2009-5068?: High severity. CVSS v3 base score is 7.2 out of 10.