PT-2008-2697 · Moinmoin · Moinmoin

Publicado 2008-03-05 · Atualizado 2022-05-01 · CVE-2008-1099

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions MoinMoin versions 1.5.8 and earlier

Description The issue in MoinMoin allows remote attackers to read protected pages due to improper enforcement of Access Control Lists (ACLs) by the macro Getval function in wikimacro.py. This enables unauthorized access to sensitive information.

Recommendations For MoinMoin versions 1.5.8 and earlier, update to a version that includes the fix committed in revision 4a7de0173734.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2008-1099

DSA-1514-1

GHSA-JJ2F-57JG-5RM6

Produtos afetados

Moinmoin

Referências · 15

• http://securityfocus.com/bid/28177 · Nota
• http://hg.moinmo.in/moin/1.5/rev/4a7de0173734 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-1099 · Nota de Segurança
• http://secunia.com/advisories/29444 · Nota
• https://usn.ubuntu.com/716-1 · Aviso do Fabricante
• http://secunia.com/advisories/33755 · Nota
• https://redhat.com/archives/fedora-package-announce/2008-April/msg00510.html · Aviso do Fabricante
• http://moinmo.in/SecurityFixes · Nota
• https://redhat.com/archives/fedora-package-announce/2008-April/msg00538.html · Aviso do Fabricante
• https://osv.dev/vulnerability/GHSA-jj2f-57jg-5rm6 · Aviso do Fabricante
• http://gentoo.org/security/en/glsa/glsa-200803-27.xml · Aviso do Fabricante
• http://secunia.com/advisories/30031 · Nota
• http://secunia.com/advisories/29262 · Nota
• http://debian.org/security/2008/dsa-1514 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41038 · Nota