Lucene search

K
ubuntucveUbuntu.comUB:CVE-2010-0288
HistoryFeb 15, 2010 - 12:00 a.m.

CVE-2010-0288

2010-02-1500:00:00
ubuntu.com
ubuntu.com
13

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.015

Percentile

86.9%

A typo in the administrator permission check in the ACL Manager plugin
(plugins/acl/ajax.php) in DokuWiki before 2009-12-25b allows remote
attackers to gain privileges and access closed wikis by editing current ACL
statements, as demonstrated in the wild in January 2010.

Bugs

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.015

Percentile

86.9%