CVE Vulnerabilities

CVE-2015-8032

Improper Privilege Management

Published: Aug 14, 2020 | Modified: Aug 20, 2020
CVSS 3.x
5.3
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

In Textpattern 4.5.7, an unprivileged author can change an articles markup setting.

Weakness

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Affected Software

Name Vendor Start Version End Version
Textpattern Textpattern 4.5.7 (including) 4.5.7 (including)

Potential Mitigations

References