PT-2008-2697 · Moinmoin · Moinmoin

Published 2008-03-05 · Updated 2022-05-01 · CVE-2008-1099

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions MoinMoin versions 1.5.8 and earlier

Description The issue in MoinMoin allows remote attackers to read protected pages due to improper enforcement of Access Control Lists (ACLs) by the macro Getval function in wikimacro.py. This enables unauthorized access to sensitive information.

Recommendations For MoinMoin versions 1.5.8 and earlier, update to a version that includes the fix committed in revision 4a7de0173734.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2008-1099

DSA-1514-1

GHSA-JJ2F-57JG-5RM6

Affected Products

Moinmoin

References · 15

• https://nvd.nist.gov/vuln/detail/CVE-2008-1099 · Security Note
• https://usn.ubuntu.com/716-1 · Vendor Advisory
• https://redhat.com/archives/fedora-package-announce/2008-April/msg00510.html · Vendor Advisory
• https://redhat.com/archives/fedora-package-announce/2008-April/msg00538.html · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-jj2f-57jg-5rm6 · Vendor Advisory
• http://gentoo.org/security/en/glsa/glsa-200803-27.xml · Vendor Advisory
• http://debian.org/security/2008/dsa-1514 · Vendor Advisory
• http://securityfocus.com/bid/28177 · Note
• http://hg.moinmo.in/moin/1.5/rev/4a7de0173734 · Note
• http://secunia.com/advisories/29444 · Note
• http://secunia.com/advisories/33755 · Note
• http://moinmo.in/SecurityFixes · Note
• http://secunia.com/advisories/30031 · Note
• http://secunia.com/advisories/29262 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41038 · Note