PT-2015-7649
CVE-2015-7859
·
Published
2015-10-29
·
Updated
2015-10-30
Description by
CVSS 2.0
5.0
MediumMetricsAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Joomla! versions 3.2 through 3.4.4
Description
The issue concerns the com contenthistory component, which fails to properly check Access Control Lists (ACLs), allowing remote attackers to obtain sensitive information. ACLs, or Access Control Lists, are a means of defining access rights for users and groups, determining what actions they can perform on a system or its components.
Recommendations
For Joomla! versions 3.2 through 3.4.4, update to version 3.4.5 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾