Lucene search

K
ubuntucveUbuntu.comUB:CVE-2010-5297
HistoryJan 21, 2014 - 12:00 a.m.

CVE-2010-5297

2014-01-2100:00:00
ubuntu.com
ubuntu.com
12

CVSS2

2.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:S/C:N/I:P/A:N

EPSS

0.002

Percentile

58.8%

WordPress before 3.0.1, when a Multisite installation is used, permanently
retains the “site administrators can add users” option once changed, which
might allow remote authenticated administrators to bypass intended access
restrictions in opportunistic circumstances via an add action after a
temporary change.

CVSS2

2.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:S/C:N/I:P/A:N

EPSS

0.002

Percentile

58.8%