PT-2012-2009 · Piwik · Piwik

Neal Poole · Published 2012-09-18 · Updated 2022-05-13 · CVE-2011-4941

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Piwik versions 1.2 through 1.4

Description The issue allows remote attackers with the view permission to execute arbitrary code. The attack vectors are unknown.

Recommendations For Piwik versions 1.2 through 1.4, update to a version that contains a fix for this issue.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2011-4941

GHSA-2QR8-H6PQ-M27V

Affected Products

Piwik

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2011-4941 · Security Note
• http://piwik.org/blog/2011/06/piwik-1-5-security-advisory · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-2qr8-h6pq-m27v · Vendor Advisory
• https://github.com/matomo-org/matomo · Note
• http://openwall.com/lists/oss-security/2012/03/18/1 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4941 · Note
• http://openwall.com/lists/oss-security/2012/03/19/8 · Note
• https://web.archive.org/web/20110626223028/http://piwik.org/blog/2011/06/piwik-1-5-security-advisory · Note