Access Control Vulnerability in baserCMS by baserTEAM
CVE-2018-0572

8.1HIGH

Key Information:

Vendor

Basercms Users Community

Status
Basercms
Vendor
CVE Published:
26 June 2018

What is CVE-2018-0572?

baserCMS versions 4.1.0.1 and earlier, as well as 3.0.15 and earlier, are susceptible to a vulnerability that allows remote authenticated attackers to bypass access restrictions. This flaw enables unauthorized users to view or modify restricted content through unspecified vectors, posing a serious risk to data confidentiality and integrity for websites utilizing baserCMS.

Affected Version(s)

baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions)

References

https://basercms.net/security/JVN67881316
x_refsource_MISC
http://jvn.jp/en/jp/JVN67881316/index.html
third-party-advisoryx_refsource_JVN

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.