CVE-2011-2674

high

Description

BaserCMS before 1.6.12 does not properly restrict additions to the membership of the operators group, which allows remote authenticated users to gain privileges via unspecified vectors.

References

http://jvndb.jvn.jp/jvndb/JVNDB-2011-000066

http://jvn.jp/en/jp/JVN16617002/index.html

http://basercms.net/patch/JVN09789751

Details

Source: Mitre, NVD

Published: 2011-10-02

Updated: 2021-07-15

Risk Information

CVSS v2

Base Score: 4.9

Vector: CVSS2#AV:N/AC:M/Au:S/C:P/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 8.8

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Severity: High

Detections

Analytics