Описание
A typo in the administrator permission check in the ACL Manager plugin (plugins/acl/ajax.php) in DokuWiki before 2009-12-25b allows remote attackers to gain privileges and access closed wikis by editing current ACL statements, as demonstrated in the wild in January 2010.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | ignored | end of life |
| bionic | not-affected | 0.0.20131208-1 |
| dapper | ignored | end of life |
| devel | not-affected | 0.0.20131208-1 |
| esm-apps-legacy/xenial | not-affected | 0.0.20131208-1 |
| esm-apps/bionic | not-affected | 0.0.20131208-1 |
| esm-apps/xenial | not-affected | 0.0.20131208-1 |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was not-affected [0.0.20131208-1]] |
| hardy | ignored | end of life |
| intrepid | ignored | end of life, was needs-triage |
Показывать по
EPSS
7.5 High
CVSS2
Связанные уязвимости
A typo in the administrator permission check in the ACL Manager plugin (plugins/acl/ajax.php) in DokuWiki before 2009-12-25b allows remote attackers to gain privileges and access closed wikis by editing current ACL statements, as demonstrated in the wild in January 2010.
A typo in the administrator permission check in the ACL Manager plugin (plugins/acl/ajax.php) in DokuWiki before 2009-12-25b allows remote attackers to gain privileges and access closed wikis by editing current ACL statements, as demonstrated in the wild in January 2010.
A typo in the administrator permission check in the ACL Manager plugin ...
A typo in the administrator permission check in the ACL Manager plugin (plugins/acl/ajax.php) in DokuWiki before 2009-12-25b allows remote attackers to gain privileges and access closed wikis by editing current ACL statements, as demonstrated in the wild in January 2010.
EPSS
7.5 High
CVSS2