HumHub privileges management
CVE-2017-20028

5.6MEDIUM

Key Information:

Vendor: Unspecified
Status: Humhub
Vendor: CVE Published:; 9 June 2022

🔔 Create Unspecified Vulnerability Alert

What is CVE-2017-20028?

A vulnerability was found in HumHub 0.20.1/1.0.0-beta.3. It has been classified as critical. This affects an unknown part. The manipulation leads to privilege escalation. It is possible to initiate the attack remotely. Upgrading to version 1.0.0 is able to address this issue. It is recommended to upgrade the affected component.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

HumHub 0.20.1

HumHub 1.0.0-beta.3

References

http://seclists.org/fulldisclosure/2017/Mar/48

x_refsource_MISC

https://vuldb.com/?id.98925

x_refsource_MISC

CVSS V3.1

Score:

5.6

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

High

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published
Jun 9, 2022
Vulnerability Reserved
Jun 5, 2022

Credit

Tim Coen

JSON

Unspecified