HumHub privileges management
CVE-2017-20028

5.6MEDIUM

Key Information:

Vendor

Unspecified

Status
Humhub
Vendor
CVE Published:
9 June 2022

What is CVE-2017-20028?

A vulnerability was found in HumHub 0.20.1/1.0.0-beta.3. It has been classified as critical. This affects an unknown part. The manipulation leads to privilege escalation. It is possible to initiate the attack remotely. Upgrading to version 1.0.0 is able to address this issue. It is recommended to upgrade the affected component.

Affected Version(s)

HumHub 0.20.1

HumHub 1.0.0-beta.3

References

http://seclists.org/fulldisclosure/2017/Mar/48
x_refsource_MISC
https://vuldb.com/?id.98925
x_refsource_MISC

CVSS V3.1

Score:
5.6
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Tim Coen
.