1. Home
  2. CVE Database
  3. CVE-2015-1173
HIGH · 7.5

CVE-2015-1173

Unit4 Polska TETA Web (formerly TETA Galactica) 22.62.3.4 does not properly restrict access to the (1) Design Mode and (2) Debug Logger mode modules, which allows remote attackers to gain privileges v...

Vulnerability Description

Unit4 Polska TETA Web (formerly TETA Galactica) 22.62.3.4 does not properly restrict access to the (1) Design Mode and (2) Debug Logger mode modules, which allows remote attackers to gain privileges via crafted "received parameters."

CVSS Score

7.5

HIGH

AV:N/AC:L/Au:N/C:P/I:P/A:P
Confidentiality
PARTIAL
Integrity
PARTIAL
Availability
PARTIAL

Affected Products

VendorProductVersions
Unit4Teta Web<= 22.62.3.4

Related Weaknesses (CWE)

CWE-284

References

FAQ

What is CVE-2015-1173?

CVE-2015-1173 is a vulnerability with a CVSS score of 7.5 (HIGH). Unit4 Polska TETA Web (formerly TETA Galactica) 22.62.3.4 does not properly restrict access to the (1) Design Mode and (2) Debug Logger mode modules, which allows remote attackers to gain privileges v...

How severe is CVE-2015-1173?

CVE-2015-1173 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2015-1173?

Check the references section above for vendor advisories and patch information. Affected products include: Unit4 Teta Web.