What is CVE-2009-5068?

CVE-2009-5068 is a high-severity vulnerability in Simplemachines Simple Machines Forum, classified under Cleartext Storage of Sensitive Information. CVSS score: 7.2/10. Published 2020-01-15.

How severe is CVE-2009-5068?

High severity. CVSS v3 base score is 7.2 out of 10.

Vulnerability in Simplemachines Simple Machines Forum

CVE-2009-5068

There is a file disclosure vulnerability in SMF (Simple Machines Forum) affecting versions through v2.0.3. On some configurations a SMF deployment is shared by several "co-admins" that are not trusted beyond the SMF deployment. This vulnerability allows them to read arbitrary files on the filesystem and therefore gain new privileges by reading the settings.php with the database passwords.

EPSS: 0.017 (75.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.

Affected products

Simplemachines Simple_machines_forum
Smf — versions through 2.0.3

Weakness classification (CWE)

CWE-312 — Cleartext Storage of Sensitive Information

References

secalert@redhat.com (Mailing List, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2009-5068?: CVE-2009-5068 is a high-severity vulnerability in Simplemachines Simple Machines Forum, classified under Cleartext Storage of Sensitive Information. CVSS score: 7.2/10. Published 2020-01-15.
How severe is CVE-2009-5068?: High severity. CVSS v3 base score is 7.2 out of 10.