CVE-2012-6563

engine/lib/access.php in Elgg before 1.8.5 does not properly clear cached access lists during plugin boot, which allows remote attackers to read private entities via unspecified vectors...

PT-2013-2017

Name of the Vulnerable Software and Affected Versions Elgg versions prior to 1.8.5 Description The issue arises from improper clearing of cached access lists during plugin boot in the engine/lib/access.php file. This allows remote attackers to read private entities via unspecified vectors...

CVE-2012-6563: Undefined Security Weakness

engine/lib/access.php in Elgg before 1.8.5 does not properly clear cached access lists during plugin boot, which allows remote attackers to read private entities via unspecified vectors...