CVE-2010-0288
Priority
Medium
Description
A typo in the administrator permission check in the ACL Manager plugin
(plugins/acl/ajax.php) in DokuWiki before 2009-12-25b allows remote
attackers to gain privileges and access closed wikis by editing current ACL
statements, as demonstrated in the wild in January 2010.
(plugins/acl/ajax.php) in DokuWiki before 2009-12-25b allows remote
attackers to gain privileges and access closed wikis by editing current ACL
statements, as demonstrated in the wild in January 2010.
References
Package
| Upstream: | needs-triage |
| Ubuntu 8.04 LTS (Hardy Heron): | ignored (reached end-of-life) |
| Ubuntu 10.04 LTS (Lucid Lynx): | needs-triage |
| Ubuntu 11.10 (Oneiric Ocelot): | ignored (reached end-of-life) |
| Ubuntu 12.04 LTS (Precise Pangolin): | needs-triage |
| Ubuntu 12.10 (Quantal Quetzal): | needs-triage |
| Ubuntu 13.04 (Raring Ringtail): | needs-triage |
| Ubuntu 13.10 (Saucy Salamander): | needs-triage |