Vulnerability Description
BaserCMS before 1.6.12 does not properly restrict additions to the membership of the operators group, which allows remote authenticated users to gain privileges via unspecified vectors.
CVSS Score
4.9
MEDIUM
AV:N/AC:M/Au:S/C:P/I:P/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Basercms | Basercms | <= 1.6.11.4 |
Related Weaknesses (CWE)
References
- http://basercms.net/patch/JVN09789751
- http://jvn.jp/en/jp/JVN16617002/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2011-000066
- http://basercms.net/patch/JVN09789751
- http://jvn.jp/en/jp/JVN16617002/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2011-000066
FAQ
What is CVE-2011-2674?
CVE-2011-2674 is a vulnerability with a CVSS score of 4.9 (MEDIUM). BaserCMS before 1.6.12 does not properly restrict additions to the membership of the operators group, which allows remote authenticated users to gain privileges via unspecified vectors.
How severe is CVE-2011-2674?
CVE-2011-2674 has been rated MEDIUM with a CVSS base score of 4.9/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2011-2674?
Check the references section above for vendor advisories and patch information. Affected products include: Basercms Basercms.