PT-2010-2082 · Dokuwiki · Dokuwiki

Publicado 2010-02-15 · Atualizado 2019-09-23 · CVE-2010-0288

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions DokuWiki versions prior to 2009-12-25b

Description A typo in the administrator permission check in the ACL Manager plugin allows remote attackers to gain privileges and access closed wikis by editing current ACL statements. This issue has been exploited in the wild.

Recommendations For versions prior to 2009-12-25b, update to a version that includes the fix for the administrator permission check in the ACL Manager plugin. As a temporary workaround, consider restricting access to the ACL Manager plugin to minimize the risk of exploitation.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2010-0288

DSA-1976-1

Produtos afetados

Dokuwiki

Referências · 21

• 🔥 https://exploit-db.com/exploits/11141 · Exploit
• 🔥 http://exploit-db.com/exploits/11141 · Exploit
• http://osvdb.org/61710 · Nota
• http://splitbrain.org/blog/2010-01/17-dokuwiki-security · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/55661 · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2010-0288 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2010-0288 · Nota de Segurança
• http://securityfocus.com/bid/37820 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0288 · Nota
• http://lists.fedoraproject.org/pipermail/package-announce/2010-February/034831.html · Aviso do Fabricante
• http://secunia.com/advisories/38183 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2010-0288 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2010-0288 · Aviso do Fabricante
• http://lists.fedoraproject.org/pipermail/package-announce/2010-February/034729.html · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2010-0288 · Aviso do Fabricante