CVE-2007-0131
Current Description
JAMWiki before 0.5.0 does not properly check permissions during moves of "read-only or admin-only topics," which allows remote attackers to make unauthorized changes to the wiki.
Basic Data
| Published | January 09, 2007 |
|---|
| Last Modified | July 29, 2017 |
|---|
| Assigner | cve@mitre.org |
|---|
| Data Type | CVE |
|---|
| Data Format | MITRE |
|---|
| Data Version | 4.0 |
|---|
| Problem Type | NVD-CWE-Other |
|---|
| CVE Data Version | 4.0 |
|---|
Base Metric V2
| CVSS 2 - Version | 2.0 |
|---|
| CVSS 2 - Vector String | AV:N/AC:L/Au:N/C:P/I:P/A:P |
|---|
| CVSS 2 - Access Vector | NETWORK |
|---|
| CVSS 2 - Access Complexity | LOW |
|---|
| CVSS 2 - Authentication | NONE |
|---|
| CVSS 2 - Confidentiality Impact | PARTIAL |
|---|
| CVSS 2 - Availability Impact | PARTIAL |
|---|
| CVSS 2 - Base Score | 7.5 |
|---|
| Severity | HIGH |
|---|
| Exploitability Score | 10.0 |
|---|
| Impact Score | 6.4 |
|---|
| Obtain All Privilege | false |
|---|
| Obtain User Privilege | false |
|---|
| Obtain Other Privilege | true |
|---|
Base Metric V3
No data provided.
Configurations
-
OR - Configuration 1
| Cpe Version | Part | Vendor | Product | Version | Update | Edition | Language | SW Edition | Target SW | Target HW | Other | Version Start Including | Version End Including | Version Start Excluding | Version End Excluding |
|---|
| 2.3 | Application | Jamwiki | Jamwiki | * | * | * | * | * | * | * | * | | 0.4.3 | | |
Vulnerable Software List
References
| Name | Source | URL | Tags |
|---|
| 32581 | http://osvdb.org/32581 | OSVDB | |
| 23634 | http://secunia.com/advisories/23634 | SECUNIA | |
| http://sourceforge.net/project/shownotes.php?group_id=171441&release_id=475663 | http://sourceforge.net/project/shownotes.php?group_id=171441&release_id=475663 | CONFIRM | Patch |
| 21879 | http://www.securityfocus.com/bid/21879 | BID | |
| jamwiki-permission-security-bypass(31296) | https://exchange.xforce.ibmcloud.com/vulnerabilities/31296 | XF | |
Follow @discotekdotca