6

CVE-2012-4404

security/__init__.py in MoinMoin 1.9 through 1.9.4 does not properly handle group names that contain virtual group names such as "All," "Known," or "Trusted," which allows remote authenticated users with virtual group membership to be treated as a member of the group.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Moinmo ≫ Moinmoin Version1.9.0
Moinmo ≫ Moinmoin Version1.9.1
Moinmo ≫ Moinmoin Version1.9.2
Moinmo ≫ Moinmoin Version1.9.3
Moinmo ≫ Moinmoin Version1.9.4
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.09% 0.792
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6 6.8 6.4
AV:N/AC:M/Au:S/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://moinmo.in/SecurityFixes
Vendor Advisory
http://secunia.com/advisories/50885
http://www.ubuntu.com/usn/USN-1604-1
http://hg.moinmo.in/moin/1.9/rev/7b9f39289e16
http://secunia.com/advisories/50474
Vendor Advisory
http://secunia.com/advisories/50496
Vendor Advisory
http://www.debian.org/security/2012/dsa-2538
http://www.openwall.com/lists/oss-security/2012/09/04/4
http://www.openwall.com/lists/oss-security/2012/09/05/2