// For flags

CVE-2012-6637

 

Severity Score

7.5
*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

1
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Apache Cordova 3.3.0 and earlier and Adobe PhoneGap 2.9.0 and earlier do not anchor the end of domain-name regular expressions, which allows remote attackers to bypass a whitelist protection mechanism via a domain name that contains an acceptable name as an initial substring.

Apache Cordova 3.3.0 y anteriores y Adobe PhoneGap 2.9.0 y anteriores no identifican las expresiones regulares del final de un nombre de dominio, lo que permite a atacantes remotos evadir un mecanismo de protección de lista blanca a través de un nombre de dominio que contiene un nombre aceptable como subcadena inicial.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
Partial
Integrity
Partial
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2014-02-07 CVE Reserved
  • 2014-03-03 CVE Published
  • 2024-08-06 CVE Updated
  • 2024-08-06 First Exploit
  • 2024-12-17 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
CWE
  • CWE-20: Improper Input Validation
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Apache
Search vendor "Apache"
Cordova
Search vendor "Apache" for product "Cordova"
<= 3.3.0
Search vendor "Apache" for product "Cordova" and version " <= 3.3.0"
-
Affected
Apache
Search vendor "Apache"
Cordova
Search vendor "Apache" for product "Cordova"
3.0.0
Search vendor "Apache" for product "Cordova" and version "3.0.0"
-
Affected
Apache
Search vendor "Apache"
Cordova
Search vendor "Apache" for product "Cordova"
3.0.0
Search vendor "Apache" for product "Cordova" and version "3.0.0"
rc1
Affected
Apache
Search vendor "Apache"
Cordova
Search vendor "Apache" for product "Cordova"
3.1.0
Search vendor "Apache" for product "Cordova" and version "3.1.0"
-
Affected
Apache
Search vendor "Apache"
Cordova
Search vendor "Apache" for product "Cordova"
3.1.0
Search vendor "Apache" for product "Cordova" and version "3.1.0"
rc1
Affected
Apache
Search vendor "Apache"
Cordova
Search vendor "Apache" for product "Cordova"
3.2.0
Search vendor "Apache" for product "Cordova" and version "3.2.0"
-
Affected
Apache
Search vendor "Apache"
Cordova
Search vendor "Apache" for product "Cordova"
3.2.0
Search vendor "Apache" for product "Cordova" and version "3.2.0"
rc1
Affected
Apache
Search vendor "Apache"
Cordova
Search vendor "Apache" for product "Cordova"
3.3.0
Search vendor "Apache" for product "Cordova" and version "3.3.0"
rc1
Affected
Adobe
Search vendor "Adobe"
Phonegap
Search vendor "Adobe" for product "Phonegap"
<= 2.9.0
Search vendor "Adobe" for product "Phonegap" and version " <= 2.9.0"
-
Affected
Adobe
Search vendor "Adobe"
Phonegap
Search vendor "Adobe" for product "Phonegap"
2.0.0
Search vendor "Adobe" for product "Phonegap" and version "2.0.0"
-
Affected
Adobe
Search vendor "Adobe"
Phonegap
Search vendor "Adobe" for product "Phonegap"
2.0.0
Search vendor "Adobe" for product "Phonegap" and version "2.0.0"
rc1
Affected
Adobe
Search vendor "Adobe"
Phonegap
Search vendor "Adobe" for product "Phonegap"
2.1.0
Search vendor "Adobe" for product "Phonegap" and version "2.1.0"
-
Affected
Adobe
Search vendor "Adobe"
Phonegap
Search vendor "Adobe" for product "Phonegap"
2.2.0
Search vendor "Adobe" for product "Phonegap" and version "2.2.0"
-
Affected
Adobe
Search vendor "Adobe"
Phonegap
Search vendor "Adobe" for product "Phonegap"
2.2.0
Search vendor "Adobe" for product "Phonegap" and version "2.2.0"
rc1
Affected
Adobe
Search vendor "Adobe"
Phonegap
Search vendor "Adobe" for product "Phonegap"
2.2.0
Search vendor "Adobe" for product "Phonegap" and version "2.2.0"
rc2
Affected
Adobe
Search vendor "Adobe"
Phonegap
Search vendor "Adobe" for product "Phonegap"
2.3.0
Search vendor "Adobe" for product "Phonegap" and version "2.3.0"
-
Affected
Adobe
Search vendor "Adobe"
Phonegap
Search vendor "Adobe" for product "Phonegap"
2.3.0
Search vendor "Adobe" for product "Phonegap" and version "2.3.0"
rc1
Affected
Adobe
Search vendor "Adobe"
Phonegap
Search vendor "Adobe" for product "Phonegap"
2.3.0
Search vendor "Adobe" for product "Phonegap" and version "2.3.0"
rc2
Affected
Adobe
Search vendor "Adobe"
Phonegap
Search vendor "Adobe" for product "Phonegap"
2.4.0
Search vendor "Adobe" for product "Phonegap" and version "2.4.0"
-
Affected
Adobe
Search vendor "Adobe"
Phonegap
Search vendor "Adobe" for product "Phonegap"
2.4.0
Search vendor "Adobe" for product "Phonegap" and version "2.4.0"
rc1
Affected
Adobe
Search vendor "Adobe"
Phonegap
Search vendor "Adobe" for product "Phonegap"
2.5.0
Search vendor "Adobe" for product "Phonegap" and version "2.5.0"
-
Affected
Adobe
Search vendor "Adobe"
Phonegap
Search vendor "Adobe" for product "Phonegap"
2.5.0
Search vendor "Adobe" for product "Phonegap" and version "2.5.0"
rc1
Affected
Adobe
Search vendor "Adobe"
Phonegap
Search vendor "Adobe" for product "Phonegap"
2.6.0
Search vendor "Adobe" for product "Phonegap" and version "2.6.0"
-
Affected
Adobe
Search vendor "Adobe"
Phonegap
Search vendor "Adobe" for product "Phonegap"
2.6.0
Search vendor "Adobe" for product "Phonegap" and version "2.6.0"
rc1
Affected
Adobe
Search vendor "Adobe"
Phonegap
Search vendor "Adobe" for product "Phonegap"
2.7.0
Search vendor "Adobe" for product "Phonegap" and version "2.7.0"
-
Affected
Adobe
Search vendor "Adobe"
Phonegap
Search vendor "Adobe" for product "Phonegap"
2.7.0
Search vendor "Adobe" for product "Phonegap" and version "2.7.0"
rc1
Affected
Adobe
Search vendor "Adobe"
Phonegap
Search vendor "Adobe" for product "Phonegap"
2.8.0
Search vendor "Adobe" for product "Phonegap" and version "2.8.0"
-
Affected
Adobe
Search vendor "Adobe"
Phonegap
Search vendor "Adobe" for product "Phonegap"
2.8.1
Search vendor "Adobe" for product "Phonegap" and version "2.8.1"
-
Affected
Adobe
Search vendor "Adobe"
Phonegap
Search vendor "Adobe" for product "Phonegap"
2.9.0
Search vendor "Adobe" for product "Phonegap" and version "2.9.0"
rc1
Affected