CVE-2004-2559

DokuWiki before 2004-10-19 allows remote attackers to access administrative functionality including (1) Mediaselectiondialog, (2) Recent changes, (3) feed, and (4) search, possibly due to the lack of ACL checks.

CVSS v2.0 7.5 HIGH

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://securitytracker.com/id?1011802	Patch
http://wiki.splitbrain.org/wiki:old_changes
http://www.osvdb.org/11005
https://exchange.xforce.ibmcloud.com/vulnerabilities/17799

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-07-04:::::::*
	cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-07-07:::::::*
	cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-07-12:::::::*
	cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-07-21:::::::*
	cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-07-25:::::::*
	cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-08-08:::::::*
	cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-08-15a:::::::*
	cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-08-22:::::::*
	cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-09-12:::::::*
	cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-09-25:::::::*
	cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-09-30:::::::*

History

No history.

Information

Published : 2004-12-31 05:00

Updated : 2017-07-11 01:32

NVD link : CVE-2004-2559

Mitre link : CVE-2004-2559

CVE.ORG link : CVE-2004-2559

JSON object : View

Products Affected

andreas_gohr

dokuwiki

CWE

NVD-CWE-Other

{"id": "CVE-2004-2559", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}]}, "published": "2004-12-31T05:00:00.000", "references": [{"url": "http://securitytracker.com/id?1011802", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "http://wiki.splitbrain.org/wiki:old_changes", "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/11005", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17799", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "DokuWiki before 2004-10-19 allows remote attackers to access administrative functionality including (1) Mediaselectiondialog, (2) Recent changes, (3) feed, and (4) search, possibly due to the lack of ACL checks."}], "lastModified": "2017-07-11T01:32:00.657", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-07-04:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7FFB3CD9-5B04-4200-87CF-F1B65902D0B0"}, {"criteria": "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-07-07:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "84F5F7BA-00EF-4ACB-A8BA-0CD06A9ABB44"}, {"criteria": "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-07-12:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "63EDDA58-22F6-456A-986D-6A58FD818F5D"}, {"criteria": "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-07-21:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C907D889-8DD7-4542-A74E-C318271E5812"}, {"criteria": "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-07-25:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "46E98CDA-E813-427A-944A-2A768F075021"}, {"criteria": "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-08-08:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E589DA1C-7428-48A3-A115-3168F99584E6"}, {"criteria": "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-08-15a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2B197CF8-3729-414F-8BAA-BC709DEAA140"}, {"criteria": "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-08-22:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E5470BA9-F1F1-484B-B4D2-328D98483D55"}, {"criteria": "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-09-12:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "43D11132-69EC-40DD-9D62-CC2B7DF7C344"}, {"criteria": "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-09-25:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EDCFDB3E-AB07-4E4C-A065-617A39505EB9"}, {"criteria": "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-09-30:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E4A4E1DB-705A-4FD8-913B-D43C4E9117A3"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}