2 matches found
CVE-2012-6563
engine/lib/access.php in Elgg before 1.8.5 does not properly clear cached access lists during plugin boot, which allows remote attackers to read private entities via unspecified vectors...
4.3CVSS6.6AI score0.01231EPSS
SaveExploits0References5
Design/Logic Flaw
engine/lib/access.php in Elgg before 1.8.5 does not properly clear cached access lists during plugin boot, which allows remote attackers to read private entities via unspecified vectors...
4.3CVSS7.1AI score0.01231EPSS
SaveExploits0References5Affected Software1
20