WordPress Security Bypass And Information Disclosure Vulnerabilities

Bugtraq ID:	54224
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Jun 28 2012 12:00AM
Updated:	Jun 28 2012 12:00AM
Credit:	Reported by the vendor
Vulnerable:	WordPress WordPress 3.3.2 WordPress WordPress 3.2.2 WordPress WordPress 3.1.4 WordPress WordPress 3.1.3 WordPress WordPress 3.1.2 WordPress WordPress 3.1.1 WordPress WordPress 3.0.5 WordPress WordPress 3.0.4 WordPress WordPress 3.0.3 WordPress WordPress 3.0.2 WordPress WordPress 3.3.1 WordPress WordPress 3.3 WordPress WordPress 3.2-RC3 WordPress WordPress 3.2-RC1 WordPress WordPress 3.1.3 WordPress WordPress 3.1 WordPress WordPress 3.0.6 WordPress WordPress 3.0.1 WordPress WordPress 3.0
Not Vulnerable:

WordPress Security Bypass And Information Disclosure Vulnerabilities

WordPress is prone to a security-bypass vulnerability and an information-disclosure vulnerability.

Successful attacks can allow an attacker to obtain sensitive information and bypass certain security restrictions.

WordPress Security Bypass And Information Disclosure Vulnerabilities

Attackers can use a browser to exploit these issues.

WordPress Security Bypass And Information Disclosure Vulnerabilities

Solution:
Updates are available. Please see the references for more information.

WordPress Security Bypass And Information Disclosure Vulnerabilities

References:

• WordPress 3.4.1 Maintenance and Security Release (WordPress)
  
• WordPress Homepage (WordPress)