Joomla! CVE-2017-11364 Ownership Verification Security Bypass Vulnerability
BID:99952
Info
Joomla! CVE-2017-11364 Ownership Verification Security Bypass Vulnerability
| Bugtraq ID: | 99952 |
| Class: | Access Validation Error |
| CVE: |
CVE-2017-11364 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 06 2017 12:00AM |
| Updated: | Apr 06 2017 12:00AM |
| Credit: | Hanno Böck |
| Vulnerable: |
SocialMPN SocialMPN 1.0.5 Joomla Joomla! 3.7.3 Joomla Joomla! 3.7.2 Joomla Joomla! 3.7.1 Joomla Joomla! 3.7 Joomla Joomla! 3.6.5 Joomla Joomla! 3.4.7 Joomla Joomla! 3.4.6 Joomla Joomla! 3.4.4 Joomla Joomla! 3.4.3 Joomla Joomla! 3.4.2 Joomla Joomla! 3.4.1 Joomla Joomla! 3.4 Joomla Joomla! 3.3.6 Joomla Joomla! 3.3.5 Joomla Joomla! 3.3.4 Joomla Joomla! 3.3.3 Joomla Joomla! 3.3.2 Joomla Joomla! 3.3.1 Joomla Joomla! 3.3 Joomla Joomla! 3.2.6 Joomla Joomla! 3.2.5 Joomla Joomla! 3.2.4 Joomla Joomla! 3.2.3 Joomla Joomla! 3.2.2 Joomla Joomla! 3.2.1 Joomla Joomla! 3.1.6 Joomla Joomla! 3.1.5 Joomla Joomla! 3.1.4 Joomla Joomla! 3.1.1 Joomla Joomla! 3.1 Joomla Joomla! 3.0.4 Joomla Joomla! 3.0.3 Joomla Joomla! 3.0.1 Joomla Joomla! 3.0 Joomla Joomla! 2.5.26 Joomla Joomla! 2.5.25 Joomla Joomla! 2.5.24 Joomla Joomla! 2.5.19 Joomla Joomla! 2.5.18 Joomla Joomla! 2.5.17 Joomla Joomla! 2.5.16 Joomla Joomla! 2.5.15 Joomla Joomla! 2.5.14 Joomla Joomla! 2.5.13 Joomla Joomla! 2.5.11 Joomla Joomla! 2.5.10 Joomla Joomla! 2.5.9 Joomla Joomla! 2.5.8 Joomla Joomla! 2.5.7 Joomla Joomla! 2.5.6 Joomla Joomla! 2.5.5 Joomla Joomla! 2.5.4 Joomla Joomla! 2.5.3 Joomla Joomla! 2.5.2 Joomla Joomla! 2.5.1 Joomla Joomla! 2.5 Joomla Joomla! 1.7.5 Joomla Joomla! 1.7.4 Joomla Joomla! 1.7.3 Joomla Joomla! 1.7.2 Joomla Joomla! 1.7.1 Joomla Joomla! 1.7 Joomla Joomla! 1.6.6 Joomla Joomla! 1.6.4 Joomla Joomla! 1.6.3 Joomla Joomla! 1.6.2 Joomla Joomla! 1.6.1 Joomla Joomla! 1.6 Joomla Joomla! 1.5.26 Joomla Joomla! 1.5.22 Joomla Joomla! 1.5.21 Joomla Joomla! 1.5.20 Joomla Joomla! 1.5.19 Joomla Joomla! 1.5.18 Joomla Joomla! 1.5.17 Joomla Joomla! 1.5.16 Joomla Joomla! 1.5.14 Joomla Joomla! 1.5.13 Joomla Joomla! 1.5.12 Joomla Joomla! 1.5.11 Joomla Joomla! 1.5.10 Joomla Joomla! 1.5.9 Joomla Joomla! 1.5.8 Joomla Joomla! 1.5.7 Joomla Joomla! 1.5.6 Joomla Joomla! 1.5.5 Joomla Joomla! 1.5.4 Joomla Joomla! 1.5.2 Joomla Joomla! 3.6.4 Joomla Joomla! 3.6.3 Joomla Joomla! 3.6.1 Joomla Joomla! 3.6.0 Joomla Joomla! 3.4.5 Joomla Joomla! 3.2 Joomla Joomla! 1.6.5 Joomla Joomla! 1.5.23 Joomla Joomla! 1.5.1 Joomla Joomla! 1.5.0 Joomla Joomla 1.0.15 Joomla Joomla 1.0.14 Joomla Joomla 1.0.13 Joomla Joomla 1.0.12 Joomla Joomla 1.0.11 Joomla Joomla 1.0.10 Joomla Joomla 1.0.9 Joomla Joomla 1.0.8 Joomla Joomla 1.0.7 Joomla Joomla 1.0.4 Joomla Joomla 1.0.3 Joomla Joomla 1.0.2 Joomla Joomla 1.0.1 Joomla Joomla 1.0 |
| Not Vulnerable: |
Joomla Joomla! 3.7.4 |
Discussion
Joomla! CVE-2017-11364 Ownership Verification Security Bypass Vulnerability
Joomla! is prone to a security-bypass vulnerability.
An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions; this may aid in launching further attacks.
Joomla! 1.0.0 through 3.7.3 are vulnerable.
Joomla! is prone to a security-bypass vulnerability.
An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions; this may aid in launching further attacks.
Joomla! 1.0.0 through 3.7.3 are vulnerable.
Solution / Fix
Joomla! CVE-2017-11364 Ownership Verification Security Bypass Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.