PT-2017-9941 · Open Source Matters · Joomla!

Publicado 2017-01-23 · Atualizado 2017-01-26 · CVE-2016-9081

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Joomla! versions 3.4.4 through 3.6.3

Description The issue allows attackers to reset the username, password, and user group assignments, and possibly perform other user account modifications.

Recommendations For versions 3.4.4 through 3.6.3, update to a version outside of this range to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2016-9081

Produtos afetados

Joomla!

Referências · 5

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9081 · Nota
• http://securityfocus.com/bid/93969 · Nota
• https://osv.dev/vulnerability/CVE-2016-9081 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-9081 · Nota de Segurança
• https://developer.joomla.org/security-centre/661-20161003-core-account-modifications.html · Aviso do Fabricante