CVE-2007-4427
Last modified
CVE-2007-4427 is a vulnerability of currently unknown severity. Unspecified vulnerability in the login page redirection logic in the Cache' Server Page (CSP) implementation in InterSystems Cache' 2007.1.0.369.0 and 2007.1.1.420.0 allows remote authenticated users to modify data on a server, related to encoding of certain parameter values by this redirection logic, aka MAK2116.. EPSS estimates a 0.86% chance of exploitation in the next 30 days.
Description
Unspecified vulnerability in the login page redirection logic in the Cache' Server Page (CSP) implementation in InterSystems Cache' 2007.1.0.369.0 and 2007.1.1.420.0 allows remote authenticated users to modify data on a server, related to encoding of certain parameter values by this redirection logic, aka MAK2116.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Intersystems | Cache Database | 2007.1.0.369.0 |
| Intersystems | Cache Database | 2007.1.1.420.0 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2007-4427?
How severe is CVE-2007-4427?
How do I fix CVE-2007-4427?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2007
- CVE-2007-4421SQL injection vulnerability in Admin.php in Olate Download (…
- CVE-2007-4422The login interface in Symantec Enterprise Firewall 6.x, whe…
- CVE-2007-4423Stack-based buffer overflow in the AUTH_LIST_GROUPS_FOR_AUTH…
- CVE-2007-4424Apple Safari for Windows 3.0.3 and earlier does not prompt t…
- CVE-2007-4425Multiple buffer overflows in Live for Speed (LFS) demo, S1, …
- CVE-2007-4426Live for Speed (LFS) S1 and S2 allows remote attackers to ca…
- CVE-2007-4428Lhaz 1.33 allows remote attackers to execute arbitrary code …
- CVE-2007-4429Unspecified vulnerability in Skype allows remote attackers t…
- CVE-2007-4430Unspecified vulnerability in Cisco IOS 12.0 through 12.4 all…
- CVE-2007-4431Cross-domain vulnerability in Apple Safari for Windows 3.0.3…
- CVE-2007-4432Untrusted search path vulnerability in the wrapper scripts f…
- CVE-2007-4433Cross-site scripting (XSS) vulnerability in textfilesearch.a…
Are you affected by CVE-2007-4427?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST