Design/Logic Flaw

2012-10-0621:55:00

PRIOn knowledge base

www.prio-n.com

7 High

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

78.1%

JSON

Unspecified vulnerability in ez Publish 4.1.4, 4.2, 4.3, 4.4, 4.5, and 4.6 has unknown impact and attack vectors related to an insecure direct object reference.

CPENameOperatorVersion
ez_publisheq4.2.0
ez_publisheq4.1.4
ez_publisheq4.3.0
ez_publisheq4.4.0
ez_publisheq4.5.0
ez_publisheq4.6.0

Name	Operator	Version
ez_publish	eq	4.2.0
ez_publish	eq	4.1.4
ez_publish	eq	4.3.0
ez_publish	eq	4.4.0
ez_publish	eq	4.5.0
ez_publish	eq	4.6.0

References

issues.ez.no/19238

osvdb.org/80098

secunia.com/advisories/48338

www.openwall.com/lists/oss-security/2012/03/19/13

www.openwall.com/lists/oss-security/2012/03/19/6

www.securityfocus.com/bid/52516

exchange.xforce.ibmcloud.com/vulnerabilities/74060