Vulnerability CVE-2008-6844
Published: 2009-07-02   Modified: 2012-02-12

Description:
The registration view (/user/register) in eZ Publish 3.5.6 and earlier, and possibly other versions before 3.9.5, 3.10.1, and 4.0.1, allows remote attackers to gain privileges as other users via modified ContentObjectAttribute_data_user_login_30, ContentObjectAttribute_data_user_password_30, and other parameters.

See advisories in our WLB2 database:
Topic
Author
Date
High
eZ Publish < 3.9.5/3.10.1/4.0.1 Privilege Escalation Exploit
s4avrd0w
04.07.2009

Type:

CWE-264

 (Permissions, Privileges, and Access Controls)

CVSS2 => (AV:N/AC:L/Au:N/C:P/I:P/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
7.5/10
6.4/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
Partial
Partial
Affected software
Ez systems -> Ez publish 
EZ -> Ez publish 

 References:
http://ez.no/developer/security/security_advisories/ez_publish_4_0/ezsa_2008_003_insufficient_form_handling_made_privilege_escalation_possible
http://www.milw0rm.com/exploits/7406
http://www.securityfocus.com/bid/32762
https://exchange.xforce.ibmcloud.com/vulnerabilities/47216
Copyright 2024, cxsecurity.com

 

Back to Top