CVE-2012-1611 | Vulnerability Database | Aqua Security

Joomla! 2.5.x before 2.5.4 does not properly check permissions, which allows attackers to obtain sensitive administrative back end information via unknown attack vectors. NOTE: this might be a duplicate of CVE-2012-1599.

Affected Software

Name	Vendor	Start Version	End Version
Joomla!	Joomla	2.5.0 (including)	2.5.0 (including)
Joomla!	Joomla	2.5.1 (including)	2.5.1 (including)
Joomla!	Joomla	2.5.2 (including)	2.5.2 (including)
Joomla!	Joomla	2.5.3 (including)	2.5.3 (including)

References

http://developer.joomla.org/security/news/398-20120307-core-information-disclosure.html
http://secunia.com/advisories/48683
http://www.openwall.com/lists/oss-security/2012/04/03/3
http://www.openwall.com/lists/oss-security/2012/04/03/5
http://developer.joomla.org/security/news/398-20120307-core-information-disclosure.html
http://secunia.com/advisories/48683
http://www.openwall.com/lists/oss-security/2012/04/03/3
http://www.openwall.com/lists/oss-security/2012/04/03/5

NVD	https://nvd.nist.gov/vuln/detail/CVE-2012-1611
CWE	https://cwe.mitre.org/data/definitions/264.html