CVE-2008-6603

State: Published
Severity: Not scored
Published: Apr 3, 2009
Updated: Aug 7, 2024
Reserved: Apr 3, 2009

Description

MoinMoin 1.6.2 and 1.7 does not properly enforce ACL checks when acl_hierarchic is set to True, which might allow remote attackers to bypass intended access restrictions, a different vulnerability than CVE-2008-1937.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

http://moinmo.in/SecurityFixes
http://hg.moinmo.in/moin/1.6/rev/543ae9bdbe26
moinmoin-acl-security-bypass(41911)vdb-entry
http://moinmo.in/MoinMoinBugs/AclHierarchicPageAclSupercededByAclRightsAfter
34655vdb-entry
48875vdb-entry
http://hg.moinmo.in/moin/1.7/rev/88356b3f849a
ADV-2008-1307vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.