Access Control Vulnerability in Elgg Before Version 1.8.5
CVE-2012-6563

Currently unrated

Key Information:

Vendor: Elgg
Status: Elgg
Vendor: CVE Published:; 23 May 2013

What is CVE-2012-6563?

In Elgg prior to version 1.8.5, a critical access control vulnerability exists in the engine/lib/access.php file. This flaw allows remote attackers to exploit cached access lists during plugin boot, leading to unauthorized access to private entities through unspecified vectors. It emphasizes the necessity for users to upgrade to the latest version to safeguard sensitive information from malicious intrusions.

References

http://blog.elgg.org/pg/blog/evan/read/209/elgg-185-released

x_refsource_CONFIRM

http://secunia.com/advisories/49129

third-party-advisoryx_refsource_SECUNIA

http://elgg.org/getelgg.php?forward=elgg-1.8.5.zip

x_refsource_CONFIRM

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
May 23, 2013
Vulnerability Reserved
May 23, 2013

CVE-2012-6563 Data

JSON