Unscored CVE-2009-1055 EUVD-2009-1056GHSA-q987-2pr5-mxrr

Unspecified vulnerability in the web service in Sitecore CMS 5.3.1 rev. 071114 allows remote authenticated users to gain access to security…

Published Mar 24, 2009 · Updated Aug 7, 2024 · Assigned by mitre

Description

Unspecified vulnerability in the web service in Sitecore CMS 5.3.1 rev. 071114 allows remote authenticated users to gain access to security databases, and obtain administrative and user credentials, via unknown vectors related to SOAP and XML requests.

References

20090317 Sitecore .NET 5.3.x - web service information disclosure mailing-list
ADV-2009-0753 vdb-entry
sitecore-web-service-info-disclosure(49298) vdb-entry
34162 vdb-entry
http://sdn5.sitecore.net/Products/Sitecore%20V5/Sitecore%20CMS%205%2C-d-%2C3/ReleaseNotes/V5%2C-d-%2C3%2C-d-%2C2/ChangeLog.aspx
34356 third-party-advisory