Lucene search

K
ubuntucveUbuntu.comUB:CVE-2010-0288
HistoryFeb 15, 2010 - 12:00 a.m.

CVE-2010-0288

2010-02-1500:00:00
ubuntu.com
ubuntu.com
8

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.015 Low

EPSS

Percentile

86.6%

A typo in the administrator permission check in the ACL Manager plugin
(plugins/acl/ajax.php) in DokuWiki before 2009-12-25b allows remote
attackers to gain privileges and access closed wikis by editing current ACL
statements, as demonstrated in the wild in January 2010.

Bugs

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.015 Low

EPSS

Percentile

86.6%