CVE-2010-4215

Published: Nov 16, 2010

Modified: Aug 7, 2024

PUBLISHED

Description

UI/Manage.pm in Foswiki 1.1.0 and 1.1.1 allows remote authenticated users to gain privileges by modifying the GROUP and ALLOWTOPICCHANGE preferences in the topic preferences for Main.AdminGroup.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

44858

vdb-entry

x_refsource_BID

foswiki-manage-priv-escalation(63253)

vdb-entry

x_refsource_XF

http://foswiki.org/Support/SecurityAlertCVE20104215

x_refsource_CONFIRM

[foswiki-announce] 20101110 [ANNOUNCE] Foswiki Security Alert CVE-2010-4215 - User can alter topic preferences using the "Edit topic preference settings" feature and save them even though he has no privileges to edit the topic.

mailing-list

x_refsource_MLIST

42275

third-party-advisory

x_refsource_SECUNIA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2010-4215

Description

Affected Products

References