Vulnerability Description
DokuWiki before 2004-10-19 allows remote attackers to access administrative functionality including (1) Mediaselectiondialog, (2) Recent changes, (3) feed, and (4) search, possibly due to the lack of ACL checks.
CVSS Score
7.5
HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Andreas Gohr | Dokuwiki | release_2004-07-04 |
References
- http://securitytracker.com/id?1011802Patch
- http://wiki.splitbrain.org/wiki:old_changes
- http://www.osvdb.org/11005
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17799
- http://securitytracker.com/id?1011802Patch
- http://wiki.splitbrain.org/wiki:old_changes
- http://www.osvdb.org/11005
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17799
FAQ
What is CVE-2004-2559?
CVE-2004-2559 is a vulnerability with a CVSS score of 7.5 (HIGH). DokuWiki before 2004-10-19 allows remote attackers to access administrative functionality including (1) Mediaselectiondialog, (2) Recent changes, (3) feed, and (4) search, possibly due to the lack of ...
How severe is CVE-2004-2559?
CVE-2004-2559 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2004-2559?
Check the references section above for vendor advisories and patch information. Affected products include: Andreas Gohr Dokuwiki.