PT-2007-3239 · WordPress · Wordpress

Publicado 2007-04-09 · Atualizado 2017-07-29 · CVE-2007-1893

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Média

Vetor base

AV:A/AC:M/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: WordPress versions prior to 2.1.2

Description: The issue allows remote authenticated users with the contributor role to bypass intended access restrictions. This can be used to invoke the publish posts functionality, enabling the publishing of previously saved posts.

Recommendations: For versions prior to 2.1.2, update to a version that contains a fix for this issue to prevent exploitation.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2007-1893

DSA-1285-1

Produtos afetados

Wordpress

Referências · 12

• http://trac.wordpress.org/ticket/4091 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33470 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-1893 · Nota de Segurança
• https://osv.dev/vulnerability/DEBIAN-CVE-2007-1893 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2007-1893 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1893 · Nota
• http://secunia.com/advisories/25108 · Aviso do Fabricante
• http://secunia.com/advisories/24751 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2007-1893 · Aviso do Fabricante
• http://vupen.com/english/advisories/2007/1245 · Aviso do Fabricante
• http://debian.org/security/2007/dsa-1285 · Aviso do Fabricante
• http://notsosecure.com/folder2/2007/04/03/wordpress-212-xmlrpc-security-issues · Nota