PT-2007-1616 · Jamwiki · Jamwiki

Publicado 2007-01-09 · Atualizado 2017-07-29 · CVE-2007-0131

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions JAMWiki versions prior to 0.5.0

Description The issue arises from improper permission checks during the movement of certain topics, specifically those that are read-only or admin-only. This allows remote attackers to make unauthorized changes to the wiki.

Recommendations For versions prior to 0.5.0, update to version 0.5.0 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2007-0131

Produtos afetados

Jamwiki

Referências · 6

• http://sourceforge.net/project/shownotes.php?group_id=171441&release_id=475663 · Correção
• http://securityfocus.com/bid/21879 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-0131 · Nota de Segurança
• http://secunia.com/advisories/23634 · Nota
• http://osvdb.org/32581 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/31296 · Nota