PT-2012-4744
CVE-2012-3475
·
Publicado
2012-08-12
·
Atualizado
2012-08-13
Descrição por
CVSS 2.0
7.5
AltaMétricasAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Ushahidi Platform versions prior to 2.5
Description
The issue concerns the installer in the Ushahidi Platform, where it omits certain calls to the exit function. This allows remote attackers to obtain administrative privileges via unspecified vectors.
Recommendations
For versions prior to 2.5, update to version 2.5 or later to resolve the issue.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾