CVE

Id
46799  
CVE No.
CVE-2010-4215  
Status
Candidate  
Description
UI/Manage.pm in Foswiki 1.1.0 and 1.1.1 allows remote authenticated users to gain privileges by modifying the GROUP and ALLOWTOPICCHANGE preferences in the topic preferences for Main.AdminGroup.  
Phase
Assigned (20101109)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
511456 46799 CVE-2010-4215 MLIST:[foswiki-announce] 20101110 [ANNOUNCE] Foswiki Security Alert CVE-2010-4215 - User can alter topic preferences using the "Edit topic preference settings" feature and save them even though he has no privileges to edit the topic.  View
511457 46799 CVE-2010-4215 URL:http://sourceforge.net/mailarchive/message.php?msg_name=4CD9F6F5.4030204%40lavrsen.dk  View
511458 46799 CVE-2010-4215 CONFIRM:http://foswiki.org/Support/SecurityAlertCVE20104215  View
511459 46799 CVE-2010-4215 BID:44858  View
511460 46799 CVE-2010-4215 URL:http://www.securityfocus.com/bid/44858  View
511461 46799 CVE-2010-4215 SECUNIA:42275  View
511462 46799 CVE-2010-4215 URL:http://secunia.com/advisories/42275  View
511463 46799 CVE-2010-4215 XF:foswiki-manage-priv-escalation(63253)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
37603 JVNDB-2010-003388 IBM WebSphere Portal の SemanticTagService.js におけるクロスサイトスクリプティングの脆弱性 IBM WebSphere Portal の SemanticTagService.js には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2010-4219 46799 4.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003388.html  View