| ID | CVE-2005-4458 | ||||||
| Sažetak | Group.pm in Metadot Portal Server 6.4.4 and earlier does not properly reset the $IS_OWNER, $IS_ADMIN, and $IS_MANAGER global variables when performing checks for special privileges, which allows users to gain administrator privileges by adding themselves to the SITE_MGR group. | ||||||
| Reference |
|
||||||
| CVSS |
|
||||||
| Pristup |
|
||||||
| Impact |
|
||||||
| CVSS vektor | AV:N/AC:L/Au:S/C:C/I:C/A:C | ||||||
| Zadnje važnije ažuriranje | 19-10-2018 - 15:41 | ||||||
| Objavljeno | 21-12-2005 - 11:03 |
