Описание
Unspecified vulnerability in EPiServer CMS 5 and 6 through 6R2, in certain configurations using Forms Authentication, allows remote authenticated users to obtain WebAdmins access by leveraging Edit Mode privileges, a different vulnerability than CVE-2011-3416 and CVE-2011-3417.
Ссылки
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:episerver:episerver_cms:5.1.422.4:*:*:*:*:*:*:*
cpe:2.3:a:episerver:episerver_cms:5.1.422.122:*:*:*:*:*:*:*
cpe:2.3:a:episerver:episerver_cms:5.1.422.256:*:*:*:*:*:*:*
cpe:2.3:a:episerver:episerver_cms:5.1.422.267:*:*:*:*:*:*:*
cpe:2.3:a:episerver:episerver_cms:5.2.375.7:*:*:*:*:*:*:*
cpe:2.3:a:episerver:episerver_cms:5.2.375.133:*:*:*:*:*:*:*
cpe:2.3:a:episerver:episerver_cms:5.2.375.236:*:*:*:*:*:*:*
cpe:2.3:a:episerver:episerver_cms:6.0.530.0:*:*:*:*:*:*:*
cpe:2.3:a:episerver:episerver_cms:6.1.379.0:*:*:*:*:*:*:*
EPSS
Процентиль: 58%
0.00372
Низкий
6 Medium
CVSS2
Дефекты
NVD-CWE-noinfo
Связанные уязвимости
github
больше 3 лет назад
Unspecified vulnerability in EPiServer CMS 5 and 6 through 6R2, in certain configurations using Forms Authentication, allows remote authenticated users to obtain WebAdmins access by leveraging Edit Mode privileges, a different vulnerability than CVE-2011-3416 and CVE-2011-3417.
EPSS
Процентиль: 58%
0.00372
Низкий
6 Medium
CVSS2
Дефекты
NVD-CWE-noinfo