CVE

Id
43774  
CVE No.
CVE-2010-1190  
Status
Candidate  
Description
thumb.php in MediaWiki before 1.15.2, when used with access-restriction mechanisms such as img_auth.php, does not check user permissions before providing scaled images, which allows remote attackers to bypass intended access restrictions and read private images via unspecified manipulations.  
Phase
Assigned (20100330)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
476745 43774 CVE-2010-1190 MLIST:[MediaWiki-announce] 20100303 MediaWiki security update: 1.15.2  View
476746 43774 CVE-2010-1190 URL:http://lists.wikimedia.org/pipermail/mediawiki-announce/2010-March/000088.html  View
476747 43774 CVE-2010-1190 CONFIRM:http://svn.wikimedia.org/svnroot/mediawiki/tags/REL1_15_2/phase3/RELEASE-NOTES  View
476748 43774 CVE-2010-1190 DEBIAN:DSA-2022  View
476749 43774 CVE-2010-1190 URL:http://www.debian.org/security/2010/dsa-2022  View
476750 43774 CVE-2010-1190 SUSE:SUSE-SR:2010:010  View
476751 43774 CVE-2010-1190 URL:http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00006.html  View
476752 43774 CVE-2010-1190 SECUNIA:39022  View
476753 43774 CVE-2010-1190 URL:http://secunia.com/advisories/39022  View
476754 43774 CVE-2010-1190 SECUNIA:39656  View
476755 43774 CVE-2010-1190 URL:http://secunia.com/advisories/39656  View
476756 43774 CVE-2010-1190 VUPEN:ADV-2010-0685  View
476757 43774 CVE-2010-1190 URL:http://www.vupen.com/english/advisories/2010/0685  View
476758 43774 CVE-2010-1190 VUPEN:ADV-2010-1001  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
39580 JVNDB-2010-005365 libESMTP の smtp-tls.c における信頼済み証明書を偽装される脆弱性 libESMTP の smtp-tls.c の match_component 関数は、2 つの文字列において一方が他方のサブストリングである場合は同一として扱うため、信頼済み証明書を偽装される脆弱性が存在します。 CVE-2010-1194 43774 6.8 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-005365.html  View