PT-2010-5363 · Foswiki · Foswiki

Publicado 2010-11-16 · Atualizado 2017-08-17 · CVE-2010-4215

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Foswiki versions 1.1.0 through 1.1.1

Description The issue allows remote authenticated users to gain privileges by modifying the GROUP and ALLOWTOPICCHANGE preferences in the topic preferences for Main.AdminGroup.

Recommendations For versions 1.1.0 and 1.1.1, consider restricting access to the topic preferences for Main.AdminGroup to prevent unauthorized modifications to the GROUP and ALLOWTOPICCHANGE preferences until a fix is available.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2010-4215

Produtos afetados

Foswiki

Referências · 7

• http://foswiki.org/Support/SecurityAlertCVE20104215 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2010-4215 · Nota de Segurança
• http://sourceforge.net/mailarchive/message.php?msg_name=4CD9F6F5.4030204%40lavrsen.dk · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4215 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/63253 · Nota
• http://securityfocus.com/bid/44858 · Nota
• http://secunia.com/advisories/42275 · Aviso do Fabricante