PT-2017-8967
CVE-2016-6337
·
تاريخ النشر
2017-04-20
·
تاريخ التحديث
2017-04-24
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
MediaWiki versions 1.27.x before 1.27.1
Description
The issue might allow remote attackers to bypass intended session access restrictions. This is achieved by leveraging a call to the
UserGetRights function after Session::getAllowedUserRights.Recommendations
For MediaWiki versions 1.27.x before 1.27.1, update to version 1.27.1 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive areas of the application that rely on session access restrictions until the update can be applied.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾