Foswiki Topic Settings Remote Privilege Escalation Vulnerability

Bugtraq ID:	44858
Class:	Input Validation Error
CVE:	CVE-2010-4215
Remote:	Yes
Local:	No
Published:	Nov 12 2010 12:00AM
Updated:	Nov 12 2010 12:00AM
Credit:	Kenneth Lavrsen
Vulnerable:
Not Vulnerable:

Foswiki Topic Settings Remote Privilege Escalation Vulnerability

Foswiki is prone to a remote privilege-escalation vulnerability.

Remote attackers with the ability to edit topic settings can exploit this issue to gain administrative privileges. This may aid in further attacks.

Foswiki 1.1.0 and 1.1.1 are vulnerable.

Foswiki Topic Settings Remote Privilege Escalation Vulnerability

An attacker requires the ability to edit topic settings to exploit this issue.

Foswiki Topic Settings Remote Privilege Escalation Vulnerability

Solution:
Updates are available. Please see the references for more information.

Foswiki Topic Settings Remote Privilege Escalation Vulnerability

References:

• Product Page (Foswiki)
  
• SecurityAlertCVE20104215 (Foswiki)