Lucene search

K
patchstackRyanPATCHSTACK:70FBC6DB8AC7CB9FCF857D59E1B35F80
HistoryApr 09, 2007 - 12:00 a.m.

WordPress <= 2.1.2 - Security BYPASS

2007-04-0900:00:00
ryan
patchstack.com
4

4.9 Medium

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:M/Au:S/C:P/I:P/A:P

The authenticated users with the contributor role can bypass intended access restrictions and invoke the publish_posts functionality.

Solution

           Update the WordPress to the latest available version (at least 2.1.3).
CPENameOperatorVersion
wordpressle2.1.2

4.9 Medium

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:M/Au:S/C:P/I:P/A:P

Related for PATCHSTACK:70FBC6DB8AC7CB9FCF857D59E1B35F80