Movable Type CVE-2013-2184 Security Bypass Vulnerability

Bugtraq ID:	60570
Class:	Design Error
CVE:	CVE-2013-2184
Remote:	Yes
Local:	No
Published:	Jun 14 2013 12:00AM
Updated:	Jun 14 2013 12:00AM
Credit:	John Lightsey
Vulnerable:	Movable Type Movable Type 5.2.5 Movable Type Movable Type 5.07 Movable Type Movable Type 5.06 Movable Type Movable Type 5.051 Movable Type Movable Type 5.05 Movable Type Movable Type 5.04 Movable Type Movable Type 5.03 Movable Type Movable Type 5.02 Movable Type Movable Type 5.01 Movable Type Movable Type 5.0
Not Vulnerable:	Movable Type Movable Type 5.2.6

Movable Type CVE-2013-2184 Security Bypass Vulnerability

Movable Type is prone to a security-bypass vulnerability.

An attacker may exploit this issue to bypass certain security restrictions and perform unauthorized actions.

Versions prior to Movable Type 5.2.6 are vulnerable.

Movable Type CVE-2013-2184 Security Bypass Vulnerability

An attacker can exploit this issue using a web browser.

Movable Type CVE-2013-2184 Security Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Movable Type CVE-2013-2184 Security Bypass Vulnerability

References:

• Add a note about security concerns in Storable (Steffen Mueller)
  
• Movable Type 5.2.6 Release Notes (Six Apart Ltd)
  
• Movable Type Homepage (Movable Type)
  
• Re: CVE request: MovableType before 5.2.6 (John Lightsey)