PT-2014-8356 · Joomla · Joomla! Cms

Publicado 2014-10-08 · Atualizado 2014-10-10 · CVE-2014-7984

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Joomla! CMS versions 2.5.x through 2.5.18 Joomla! CMS versions 3.x through 3.2.2

Description The issue allows remote attackers to authenticate and bypass intended restrictions via vectors involving GMail authentication.

Recommendations For Joomla! CMS versions 2.5.x through 2.5.18, update to version 2.5.19 or later. For Joomla! CMS versions 3.x through 3.2.2, update to version 3.2.3 or later.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2014-7984

Produtos afetados

Joomla! Cms

Referências · 3

• http://developer.joomla.org/security/581-20140304-core-unauthorised-logins.html · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7984 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-7984 · Nota de Segurança