PT-2005-5512 · Ez Systems · Ez Publish

Publicado 2005-12-31 · Atualizado 2019-07-31 · CVE-2005-4851

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: eZ publish versions 3.4.4 through 3.7 before 20050722

Description: The issue allows remote authenticated users to bypass original permissions on embedded objects in XML fields and read these objects, due to certain permissions being applied on the node level.

Recommendations: For versions 3.4.4 through 3.7 before 20050722, update to a version released after 20050722 to resolve the issue.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2005-4851

Produtos afetados

Ez Publish

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2005-4851 · Nota de Segurança
• http://ez.no/download/ez_publish/changelogs/ez_publish_3_8/changelog_3_6_x_3_7_x_to_3_8_0 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4851 · Nota
• http://issues.ez.no/6841 · Nota