CVE-2012-6563

engine/lib/access.php in Elgg before 1.8.5 does not properly clear cached access lists during plugin boot, which allows remote attackers to read private…

published May 23, 2013

CVSS
—
EPSS
1%
Percentile
68.5
In the wild
Unconfirmed
What it is

engine/lib/access.php in Elgg before 1.8.5 does not properly clear cached access lists during plugin boot, which allows remote attackers to read private entities via unspecified vectors.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01231 · 68.5th percentile
Published
2013-05-23T15:00Z
EPSS history
Timeline
  • 23 MAY 15:00Z
    engine/lib/access.php in Elgg before 1.8.5 does not properly clear cached access lists during plugin boot, which allows remote attackers to read private…
    cvelistv5