PT-2007-1616 · Jamwiki · Jamwiki

Published 2007-01-09 · Updated 2017-07-29 · CVE-2007-0131

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions JAMWiki versions prior to 0.5.0

Description The issue arises from improper permission checks during the movement of certain topics, specifically those that are read-only or admin-only. This allows remote attackers to make unauthorized changes to the wiki.

Recommendations For versions prior to 0.5.0, update to version 0.5.0 or later to resolve the issue.

Fix

Related Identifiers

CVE-2007-0131

Affected Products

Jamwiki

References · 6

• http://sourceforge.net/project/shownotes.php?group_id=171441&release_id=475663 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2007-0131 · Security Note
• http://securityfocus.com/bid/21879 · Note
• http://secunia.com/advisories/23634 · Note
• http://osvdb.org/32581 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/31296 · Note