Lucene search

[email protected]CVE-2004-2559

HistoryDec 31, 2004 - 5:00 a.m.

CVE-2004-2559

2004-12-3105:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

dokuwiki

cve-2004-2559

remote attackers

administrative functionality

acl checks

security vulnerability

7.1 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.012 Low

EPSS

Percentile

84.8%

JSON

DokuWiki before 2004-10-19 allows remote attackers to access administrative functionality including (1) Mediaselectiondialog, (2) Recent changes, (3) feed, and (4) search, possibly due to the lack of ACL checks.

CPENameOperatorVersion
andreas_gohr:dokuwikiandreas gohr dokuwikieqrelease_2004-07-07
andreas_gohr:dokuwikiandreas gohr dokuwikieqrelease_2004-08-08
andreas_gohr:dokuwikiandreas gohr dokuwikieqrelease_2004-09-12
andreas_gohr:dokuwikiandreas gohr dokuwikieqrelease_2004-07-25
andreas_gohr:dokuwikiandreas gohr dokuwikieqrelease_2004-08-22
andreas_gohr:dokuwikiandreas gohr dokuwikieqrelease_2004-09-25
andreas_gohr:dokuwikiandreas gohr dokuwikieqrelease_2004-07-04
andreas_gohr:dokuwikiandreas gohr dokuwikieqrelease_2004-07-21
andreas_gohr:dokuwikiandreas gohr dokuwikieqrelease_2004-09-30
andreas_gohr:dokuwikiandreas gohr dokuwikieqrelease_2004-08-15a

CPE	Name	Operator	Version
andreas_gohr:dokuwiki	andreas gohr dokuwiki	eq	release_2004-07-07
andreas_gohr:dokuwiki	andreas gohr dokuwiki	eq	release_2004-08-08
andreas_gohr:dokuwiki	andreas gohr dokuwiki	eq	release_2004-09-12
andreas_gohr:dokuwiki	andreas gohr dokuwiki	eq	release_2004-07-25
andreas_gohr:dokuwiki	andreas gohr dokuwiki	eq	release_2004-08-22
andreas_gohr:dokuwiki	andreas gohr dokuwiki	eq	release_2004-09-25
andreas_gohr:dokuwiki	andreas gohr dokuwiki	eq	release_2004-07-04
andreas_gohr:dokuwiki	andreas gohr dokuwiki	eq	release_2004-07-21
andreas_gohr:dokuwiki	andreas gohr dokuwiki	eq	release_2004-09-30
andreas_gohr:dokuwiki	andreas gohr dokuwiki	eq	release_2004-08-15a

Rows per page:

1-10 of 111

References

securitytracker.com/id?1011802

wiki.splitbrain.org/wiki:old_changes

www.osvdb.org/11005

exchange.xforce.ibmcloud.com/vulnerabilities/17799

7.1 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.012 Low

EPSS

Percentile

84.8%

JSON

Related for CVE-2004-2559

debiancve1