CVE-2012-3475 | Vulnerability Database | Aqua Security

The installer in the Ushahidi Platform before 2.5 omits certain calls to the exit function, which allows remote attackers to obtain administrative privileges via unspecified vectors.

Affected Software

Name	Vendor	Start Version	End Version
Ushahidi_platform	Ushahidi	*	2.4.1 (including)
Ushahidi_platform	Ushahidi	1.0 (including)	1.0 (including)
Ushahidi_platform	Ushahidi	1.2 (including)	1.2 (including)
Ushahidi_platform	Ushahidi	2.0 (including)	2.0 (including)
Ushahidi_platform	Ushahidi	2.1 (including)	2.1 (including)
Ushahidi_platform	Ushahidi	2.2 (including)	2.2 (including)
Ushahidi_platform	Ushahidi	2.2.1 (including)	2.2.1 (including)
Ushahidi_platform	Ushahidi	2.3.1 (including)	2.3.1 (including)
Ushahidi_platform	Ushahidi	2.3.2 (including)	2.3.2 (including)
Ushahidi_platform	Ushahidi	2.4 (including)	2.4 (including)

References

http://openwall.com/lists/oss-security/2012/08/09/5
https://github.com/ushahidi/Ushahidi_Web/commit/7892559
https://github.com/ushahidi/Ushahidi_Web/commit/fcdad03

NVD	https://nvd.nist.gov/vuln/detail/CVE-2012-3475
CWE	https://cwe.mitre.org/data/definitions/NVD-Other.html