PT-2001-2489 · Phpslice · Phpslice

Published 2001-07-19 · Updated 2024-02-14 · CVE-2001-1367

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions PHPSlice versions 0.1.1 through 0.1.6

Description The issue concerns the checkAccess function, which does not properly verify the administrative access level. This could allow remote attackers to gain privileges.

Recommendations For PHPSlice versions 0.1.1 through 0.1.6, as a temporary workaround, consider disabling the checkAccess function until a patch is available.

Fix

Related Identifiers

CVE-2001-1367

Affected Products

Phpslice

References · 4

• http://archives.neohapsis.com/archives/vulnwatch/2001-q3/0005.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-1367 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/9649 · Note
• http://phpslice.org/comments.php?aid=1031& · Note