Test Kennung:	1.3.6.1.4.1.25623.1.1.10.2015.0093
Kategorie:	Mageia Linux Local Security Checks
Titel:	Mageia: Security Advisory (MGASA-2015-0093)
Zusammenfassung:	The remote host is missing an update for the 'dokuwiki' package(s) announced via the MGASA-2015-0093 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'dokuwiki' package(s) announced via the MGASA-2015-0093 advisory. Vulnerability Insight: Updated dokuwiki package fixes security vulnerability: DokuWiki before 20140929c has a security issue in the ACL plugins remote API component. The plugin failed to check for superuser permissions before executing ACL addition or deletion. This means everybody with permissions to call the XMLRPC API also had permissions to set up their own ACL rules and thus circumventing any existing rules (CVE-2015-2172). Affected Software/OS: 'dokuwiki' package(s) on Mageia 4. Solution: Please install the updated package(s). CVSS Score: 6.5 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2015-2172 BugTraq ID: 72827 http://www.securityfocus.com/bid/72827 http://lists.fedoraproject.org/pipermail/package-announce/2015-March/153266.html http://lists.fedoraproject.org/pipermail/package-announce/2015-March/153062.html http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152994.html http://www.openwall.com/lists/oss-security/2015/03/02/2
Copyright	Copyright (C) 2022 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.