Test ID:	1.3.6.1.4.1.25623.1.1.10.2015.0093
Category:	Mageia Linux Local Security Checks
Title:	Mageia: Security Advisory (MGASA-2015-0093)
Summary:	The remote host is missing an update for the 'dokuwiki' package(s) announced via the MGASA-2015-0093 advisory.
Description:	Summary: The remote host is missing an update for the 'dokuwiki' package(s) announced via the MGASA-2015-0093 advisory. Vulnerability Insight: Updated dokuwiki package fixes security vulnerability: DokuWiki before 20140929c has a security issue in the ACL plugins remote API component. The plugin failed to check for superuser permissions before executing ACL addition or deletion. This means everybody with permissions to call the XMLRPC API also had permissions to set up their own ACL rules and thus circumventing any existing rules (CVE-2015-2172). Affected Software/OS: 'dokuwiki' package(s) on Mageia 4. Solution: Please install the updated package(s). CVSS Score: 6.5 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2015-2172 BugTraq ID: 72827 http://www.securityfocus.com/bid/72827 http://lists.fedoraproject.org/pipermail/package-announce/2015-March/153266.html http://lists.fedoraproject.org/pipermail/package-announce/2015-March/153062.html http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152994.html http://www.openwall.com/lists/oss-security/2015/03/02/2
Copyright	Copyright (C) 2022 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.