PT-2014-8356 · Joomla · Joomla! Cms

Published 2014-10-08 · Updated 2014-10-10 · CVE-2014-7984

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Joomla! CMS versions 2.5.x through 2.5.18 Joomla! CMS versions 3.x through 3.2.2

Description The issue allows remote attackers to authenticate and bypass intended restrictions via vectors involving GMail authentication.

Recommendations For Joomla! CMS versions 2.5.x through 2.5.18, update to version 2.5.19 or later. For Joomla! CMS versions 3.x through 3.2.2, update to version 3.2.3 or later.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2014-7984

Affected Products

Joomla! Cms

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2014-7984 · Security Note
• http://developer.joomla.org/security/581-20140304-core-unauthorised-logins.html · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7984 · Note