Lucene search
PRIOn knowledge basePRION:CVE-2011-4361HistoryJan 08, 2012 - 11:55 a.m.
Design/Logic Flaw
2012-01-0811:55:00
PRIOn knowledge base
www.prio-n.com
2
MediaWiki before 1.17.1 does not check for read permission before handling action=ajax requests, which allows remote attackers to obtain sensitive information by (1) leveraging the SpecialUpload::ajaxGetExistsWarning function, or by (2) leveraging an extension, as demonstrated by the CategoryTree, ExtTab, and InlineEditor extensions.
| CPE | Name | Operator | Version |
|---|---|---|---|
| debian_linux | eq | 5.0 | |
| debian_linux | eq | 6.0 | |
| mediawiki | lt | 1.17.1 |
Related
cve
cve
CVE-2011-4361
2012-01-08 11:55:19
debiancve
debiancve
CVE-2011-4361
2012-01-08 11:55:19
cvelist
cvelist
CVE-2011-4361
2012-01-08 11:00:00
nvd
nvd
CVE-2011-4361
2012-01-08 11:55:19
ubuntucve
ubuntucve
CVE-2011-4361
2012-01-08 00:00:00
openvas
openvas
Debian Security Advisory DSA 2366-1 (mediawiki)
2012-02-11 00:00:00
Debian: Security Advisory (DSA-2366-1)
2012-02-11 00:00:00
osv
osv
mediawiki - multiple
2011-12-18 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 2366-1] mediawiki security update
2011-12-26 00:00:00
nessus
nessus
Debian DSA-2366-1 : mediawiki - multiple vulnerabilities
2012-01-12 00:00:00
debian
debian
[SECURITY] [DSA 2366-1] mediawiki security update
2011-12-19 17:31:48