Lucene search

K
joomlaOpen Source Matters, Inc.JOOMLA-84
HistoryMar 29, 2013 - 12:00 a.m.

[20130401] - Core - Privilege Escalation

2013-03-2900:00:00
Open Source Matters, Inc.
developer.joomla.org
113

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

EPSS

0.002

Percentile

53.9%

Inadequate permission checking allows unauthorised user to delete private messages.

Affected configurations

Vulners
Node
joomlajoomla\!Range<2.5.10
OR
joomlajoomla\!Range<3.1.0
OR
joomlajoomla\!Range<3.0.4
VendorProductVersionCPE
joomlajoomla\!*cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:*

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

EPSS

0.002

Percentile

53.9%