CVE-2012-2315

admin/Auth in OpenKM 5.1.7 and other versions before 5.1.8-2 does not properly enforce privileges for changing user roles, which allows remote authenticated…

published September 9, 2012

CVSS
—
EPSS
6%
Percentile
93.5
In the wild
Unconfirmed
What it is

admin/Auth in OpenKM 5.1.7 and other versions before 5.1.8-2 does not properly enforce privileges for changing user roles, which allows remote authenticated users to assign administrator privileges to arbitrary users via the userEdit action.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06218 · 93.5th percentile
Published
2012-09-09T21:00Z
EPSS history
Timeline
  • 09 SEP 21:00Z
    admin/Auth in OpenKM 5.1.7 and other versions before 5.1.8-2 does not properly enforce privileges for changing user roles, which allows remote authenticated…
    cvelistv5