BaserCMS Unspecified Security Bypass Vulnerability

Bugtraq ID:	49888
Class:	Access Validation Error
CVE:	CVE-2011-2674
Remote:	Yes
Local:	No
Published:	Sep 30 2011 12:00AM
Updated:	Sep 30 2011 12:00AM
Credit:	Masako Ohno
Vulnerable:	BaserCMS BaserCMS 1.6.11 4
Not Vulnerable:	BaserCMS BaserCMS 1.6.12

BaserCMS Unspecified Security Bypass Vulnerability

BaserCMS is prone to an unspecified security-bypass vulnerability.

Attackers can exploit this issue to bypass security protections and change the administrator's information.

BaserCMS 1.6.11.4 is vulnerable; prior versions may also be affected.

BaserCMS Unspecified Security Bypass Vulnerability

Currently we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

BaserCMS Unspecified Security Bypass Vulnerability

Solution:
Vendor updates are available. Please see the references for more information.

BaserCMS Unspecified Security Bypass Vulnerability

References:

• BaserCMS (BaserCMS)
  
• BaserCMS vulnerable to access restriction English (Link)
  
• BaserCMS vulnerable to access restriction Japanese (Link)
  
• JVN09789751 / JVN16617002 Checklist (BaserCMS)
  
• JVNDB-2011-000066 (JVN)