GitHub Advisory DatabaseGHSA-JJ2F-57JG-5RM6MoinMoin Improper Access Control
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
Confidence
Low
EPSS
Percentile
82.0%
_macro_Getval in wikimacro.py in MoinMoin 1.5.8 and earlier does not properly enforce ACLs, which allows remote attackers to read protected pages. The issue has been fixed on 4a7de0173734.
Affected configurations
References
hg.moinmo.in/moin/1.5/rev/4a7de0173734
moinmo.in/SecurityFixes
secunia.com/advisories/29262
secunia.com/advisories/29444
secunia.com/advisories/30031
secunia.com/advisories/33755
www.debian.org/security/2008/dsa-1514
www.gentoo.org/security/en/glsa/glsa-200803-27.xml
www.securityfocus.com/bid/28177
exchange.xforce.ibmcloud.com/vulnerabilities/41038
github.com/advisories/GHSA-jj2f-57jg-5rm6
nvd.nist.gov/vuln/detail/CVE-2008-1099
usn.ubuntu.com/716-1
www.redhat.com/archives/fedora-package-announce/2008-April/msg00510.html
www.redhat.com/archives/fedora-package-announce/2008-April/msg00538.html
Related
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
Confidence
Low
EPSS
Percentile
82.0%