Design/Logic Flaw

2011-10-0202:53:00

PRIOn knowledge base

www.prio-n.com

7 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

59.7%

JSON

BaserCMS before 1.6.12 does not properly restrict additions to the membership of the operators group, which allows remote authenticated users to gain privileges via unspecified vectors.

CPENameOperatorVersion
basercmseq1.5.6
basercmseq1.5.7
basercmseq1.5.4
basercmseq1.5.5
basercmseq1.5.8
basercmseq1.5.9
basercmseq1.6.0
basercmseq1.6.1
basercmseq1.6.2
basercmseq1.6.4

Name	Operator	Version
basercms	eq	1.5.6
basercms	eq	1.5.7
basercms	eq	1.5.4
basercms	eq	1.5.5
basercms	eq	1.5.8
basercms	eq	1.5.9
basercms	eq	1.6.0
basercms	eq	1.6.1
basercms	eq	1.6.2
basercms	eq	1.6.4