PT-2005-5512 · Ez Systems · Ez Publish

Published 2005-12-31 · Updated 2019-07-31 · CVE-2005-4851

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: eZ publish versions 3.4.4 through 3.7 before 20050722

Description: The issue allows remote authenticated users to bypass original permissions on embedded objects in XML fields and read these objects, due to certain permissions being applied on the node level.

Recommendations: For versions 3.4.4 through 3.7 before 20050722, update to a version released after 20050722 to resolve the issue.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2005-4851

Affected Products

Ez Publish

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2005-4851 · Security Note
• http://ez.no/download/ez_publish/changelogs/ez_publish_3_8/changelog_3_6_x_3_7_x_to_3_8_0 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4851 · Note
• http://issues.ez.no/6841 · Note