PT-2012-4744

CVE-2012-3475

·

Published

2012-08-12

·

Updated

2012-08-13

Description by

CVSS 2.0
7.5
High
MetricsAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Ushahidi Platform versions prior to 2.5
Description The issue concerns the installer in the Ushahidi Platform, where it omits certain calls to the exit function. This allows remote attackers to obtain administrative privileges via unspecified vectors.
Recommendations For versions prior to 2.5, update to version 2.5 or later to resolve the issue.
Exploitability
Fix
Researchers
Vendors
Affected products
Related identifiers
CVE-2012-3475
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com