FreeBSD : Joomla! -- multiple vulnerabilities (a27d234a-c7f2-11e6-ae1b-002590263bf5)

This script is Copyright (C) 2016 Tenable Network Security, Inc.


Synopsis :

The remote FreeBSD host is missing a security-related update.

Description :

The JSST and the Joomla! Security Center report : [20161001] - Core -
Account Creation Inadequate checks allows for users to register on a
site when registration has been disabled. [20161002] - Core - Elevated
Privilege Incorrect use of unfiltered data allows for users to
register on a site with elevated privileges. [20161003] - Core -
Account Modifications Incorrect use of unfiltered data allows for
existing user accounts to be modified; to include resetting their
username, password, and user group assignments.

See also :

http://www.nessus.org/u?ba9590d8
http://www.nessus.org/u?80833723
http://www.nessus.org/u?2094b6a9
http://www.nessus.org/u?deb43b12
http://www.nessus.org/u?a7660954

Solution :

Update the affected package.

Risk factor :

High / CVSS Base Score : 7.5
(CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P)
Public Exploit Available : true

Family: FreeBSD Local Security Checks

Nessus Plugin ID: 96060 ()

Bugtraq ID:

CVE ID: CVE-2016-8869
CVE-2016-8870
CVE-2016-9081

Ready to Amp Up Your Nessus Experience?

Get Nessus Professional to scan unlimited IPs, run compliance checks & more

Buy Nessus Professional Now