ID de Prueba:	1.3.6.1.4.1.25623.1.1.10.2015.0093
Categoría:	Mageia Linux Local Security Checks
Título:	Mageia: Security Advisory (MGASA-2015-0093)
Resumen:	The remote host is missing an update for the 'dokuwiki' package(s) announced via the MGASA-2015-0093 advisory.
Descripción:	Summary: The remote host is missing an update for the 'dokuwiki' package(s) announced via the MGASA-2015-0093 advisory. Vulnerability Insight: Updated dokuwiki package fixes security vulnerability: DokuWiki before 20140929c has a security issue in the ACL plugins remote API component. The plugin failed to check for superuser permissions before executing ACL addition or deletion. This means everybody with permissions to call the XMLRPC API also had permissions to set up their own ACL rules and thus circumventing any existing rules (CVE-2015-2172). Affected Software/OS: 'dokuwiki' package(s) on Mageia 4. Solution: Please install the updated package(s). CVSS Score: 6.5 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2015-2172 BugTraq ID: 72827 http://www.securityfocus.com/bid/72827 http://lists.fedoraproject.org/pipermail/package-announce/2015-March/153266.html http://lists.fedoraproject.org/pipermail/package-announce/2015-March/153062.html http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152994.html http://www.openwall.com/lists/oss-security/2015/03/02/2
Copyright	Copyright (C) 2022 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.