Privilege Escalation in OpenKM Product by OpenKM

CVE-2012-2315

What is CVE-2012-2315?

OpenKM versions prior to 5.1.8-2 contain a security flaw in the admin/Auth functionality that does not adequately enforce user role privileges. This weakness allows remote authenticated users to exploit the userEdit action, granting themselves or others unauthorized administrator privileges. Such privilege escalation could lead to further exploitation of the system, compromising security and access controls.

References