[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]

http://advisories.mageia.org/MGASA-2015-0093.html

http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152994.html

http://lists.fedoraproject.org/pipermail/package-announce/2015-March/153062.html

http://lists.fedoraproject.org/pipermail/package-announce/2015-March/153266.html

http://www.openwall.com/lists/oss-security/2015/03/02/2

http://www.securityfocus.com/bid/72827

https://github.com/splitbrain/dokuwiki/commit/4970ad24ce49ec76a0ee67bca7594f918ced2f5f

https://github.com/splitbrain/dokuwiki/issues/1056

https://www.dokuwiki.org/changes

OR
     *cpe:2.3:a:dokuwiki:dokuwiki:*:*:*:*:*:*:*:* versions up to (including) 2014-05-05c
     *cpe:2.3:a:dokuwiki:dokuwiki:*:*:*:*:*:*:*:* versions up to (including) 2014-09-29b

OR
     *cpe:2.3:a:dokuwiki:dokuwiki:*:*:*:*:*:*:*:* versions from (including) 2014-05-05 up to (excluding) 2014-05-05d
     *cpe:2.3:a:dokuwiki:dokuwiki:*:*:*:*:*:*:*:* versions from (including) 2014-09-29 up to (excluding) 2014-09-29c

http://advisories.mageia.org/MGASA-2015-0093.html No Types Assigned

http://advisories.mageia.org/MGASA-2015-0093.html Third Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152994.html No Types Assigned

http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152994.html Mailing List, Third Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2015-March/153062.html No Types Assigned

http://lists.fedoraproject.org/pipermail/package-announce/2015-March/153062.html Mailing List, Third Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2015-March/153266.html No Types Assigned

http://lists.fedoraproject.org/pipermail/package-announce/2015-March/153266.html Mailing List, Third Party Advisory

http://www.openwall.com/lists/oss-security/2015/03/02/2 No Types Assigned

http://www.openwall.com/lists/oss-security/2015/03/02/2 Mailing List, Third Party Advisory

http://www.securityfocus.com/bid/72827 No Types Assigned

http://www.securityfocus.com/bid/72827 Third Party Advisory, VDB Entry

https://github.com/splitbrain/dokuwiki/commit/4970ad24ce49ec76a0ee67bca7594f918ced2f5f No Types Assigned

https://github.com/splitbrain/dokuwiki/commit/4970ad24ce49ec76a0ee67bca7594f918ced2f5f Third Party Advisory

https://github.com/splitbrain/dokuwiki/issues/1056 No Types Assigned

https://github.com/splitbrain/dokuwiki/issues/1056 Third Party Advisory

https://www.dokuwiki.org/changes No Types Assigned

https://www.dokuwiki.org/changes Vendor Advisory

http://www.securityfocus.com/bid/72827 [No Types Assigned]

DokuWiki en versiones anteriores a 2014-05-05d y en versiones anteriores a 2014-09-29c no comprueba correctamente los permisos para los plugins ACL, lo que permite a usuarios remotos autenticados ganar privilegios y añadir o eliminar reglas ACL a través de una solicitud a la API XMLRPC.

DokuWiki anterior a 2014-05-05d y anterior a 2014-09-29c no comprueba correctamente los permisos para los plugins ACL, lo que permite a usuarios remotos autenticados ganar privilegios y añadir o eliminar las reglas ACL a través de una solicitud a la API XMLRPC.

DokuWiki before 2014-05-05d and before 2014-09-29c does not properly check permission for the ACL plugins, which allows remote authenticated users to gain privileges and add or delete ACL rules via a request to the XMLRPC API.

DokuWiki before 2014-05-05d and before 2014-09-29c does not properly check permissions for the ACL plugins, which allows remote authenticated users to gain privileges and add or delete ACL rules via a request to the XMLRPC API.

http://advisories.mageia.org/MGASA-2015-0093.html

(AV:N/AC:L/Au:S/C:P/I:P/A:P)

CWE-284

Configuration 1
     OR
          *cpe:2.3:a:dokuwiki:dokuwiki:2014-05-05c:*:*:*:*:*:*:* (and previous)
          *cpe:2.3:a:dokuwiki:dokuwiki:2014-09-29b:*:*:*:*:*:*:* (and previous)