PT-2008-2321 · Magnolia · Magnolia Ce

Published 2008-02-12 · Updated 2008-12-17 · CVE-2008-0701

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Magnolia CE versions 3.5.x through 3.5.3

Description The issue concerns the ActivationHandler in Magnolia CE, which fails to check permissions during the import process. This allows remote attackers to potentially add arbitrary new content by activating a new item, although the full impact is not specified.

Recommendations For Magnolia CE versions 3.5.x through 3.5.3, update to version 3.5.4 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2008-0701

Affected Products

Magnolia Ce

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2008-0701 · Security Note
• http://secunia.com/advisories/28745 · Vendor Advisory
• http://jira.magnolia.info/browse/MAGNOLIA-2021 · Note
• http://securityfocus.com/bid/27608 · Note
• http://sourceforge.net/project/shownotes.php?release_id=573088 · Note