Lucene search

K
ubuntucveUbuntu.comUB:CVE-2011-5270
HistoryJan 21, 2014 - 12:00 a.m.

CVE-2011-5270

2014-01-2100:00:00
ubuntu.com
ubuntu.com
7

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

40.8%

wp-admin/press-this.php in WordPress before 3.0.6 does not enforce the
publish_posts capability requirement, which allows remote authenticated
users to perform publish actions by leveraging the Contributor role.

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

40.8%