PT-2007-6012 · Xwiki · Xwiki

Published 2007-09-14 · Updated 2008-11-15 · CVE-2007-4898

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:N/AC:H/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: XWiki versions prior to 1.1 Enterprise RC2

Description: The issue allows remote authenticated users with administrative access to one wiki in a multiwiki environment to obtain sensitive information. The attack vectors for this issue are unknown.

Recommendations: For versions prior to 1.1 Enterprise RC2, update to version 1.1 Enterprise RC2 or later to resolve the issue.

Fix

Related Identifiers

CVE-2007-4898

Affected Products

Xwiki

References · 6

• http://xwiki.org/xwiki/bin/view/Main/ReleaseNotesXWikiEnterprise11RC2 · Patch
• http://secunia.com/advisories/26777 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-4898 · Security Note
• http://osvdb.org/40500 · Note
• http://securityfocus.com/bid/25647 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4898 · Note