PT-2012-6138 · Open Source Matters · Joomla!

Published 2012-11-11 · Updated 2017-08-29 · CVE-2012-5827

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Joomla! versions 2.5.x through 2.5.7 Joomla! versions 3.0.x through 3.0.1

Description The issue allows remote attackers to conduct clickjacking attacks via unspecified vectors involving inadequate protection.

Recommendations For Joomla! versions 2.5.x through 2.5.7, update to version 2.5.8 or later. For Joomla! versions 3.0.x through 3.0.1, update to version 3.0.2 or later.

Fix

Related Identifiers

CVE-2012-5827

Affected Products

Joomla!

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2012-5827 · Security Note
• http://developer.joomla.org/security/news/544-20121102-core-clickjacking.html · Vendor Advisory
• http://secunia.com/advisories/51187 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/79925 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5827 · Note
• http://developer.joomla.org/security/news/543-20121101-core-clickjacking.html · Note
• http://securityfocus.com/bid/56397 · Note
• http://securitytracker.com/id?1027744 · Note