CVE-2004-2559

DokuWiki before 2004-10-19 allows remote attackers to access administrative functionality including (1) Mediaselectiondialog, (2) Recent changes, (3) feed, and (4) search, possibly due to the lack of ACL checks.

CVSS v2.0 7.5 HIGH

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://www.osvdb.org/11005
http://securitytracker.com/id?1011802	Patch
http://wiki.splitbrain.org/wiki:old_changes
https://exchange.xforce.ibmcloud.com/vulnerabilities/17799

Advertisement

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-07-21:::::::*
	cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-07-25:::::::*
	cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-08-08:::::::*
	cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-08-15a:::::::*
	cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-08-22:::::::*
	cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-07-04:::::::*
	cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-09-12:::::::*
	cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-09-25:::::::*
	cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-07-07:::::::*
	cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-07-12:::::::*
	cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-09-30:::::::*

Information

Published : 2004-12-30 21:00

Updated : 2017-07-10 18:32

NVD link : CVE-2004-2559

Mitre link : CVE-2004-2559

JSON object : View

CWE

NVD-CWE-Other

Advertisement

Products Affected

andreas_gohr

dokuwiki

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://www.osvdb.org/11005", "name": "11005", "tags": [], "refsource": "OSVDB"}, {"url": "http://securitytracker.com/id?1011802", "name": "1011802", "tags": ["Patch"], "refsource": "SECTRACK"}, {"url": "http://wiki.splitbrain.org/wiki:old_changes", "name": "http://wiki.splitbrain.org/wiki:old_changes", "tags": [], "refsource": "CONFIRM"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17799", "name": "dokuwiki-acl-gain-access(17799)", "tags": [], "refsource": "XF"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "DokuWiki before 2004-10-19 allows remote attackers to access administrative functionality including (1) Mediaselectiondialog, (2) Recent changes, (3) feed, and (4) search, possibly due to the lack of ACL checks."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2004-2559", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "severity": "HIGH", "impactScore": 6.4, "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}}, "publishedDate": "2004-12-31T05:00Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-07-21:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-07-25:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-08-08:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-08-15a:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-08-22:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-07-04:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-09-12:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-09-25:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-07-07:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-07-12:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-09-30:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2017-07-11T01:32Z"}