CVE-2009-4762 — Improper Access Control in Moinmoin

CWE-284 — Improper Access Control5 documents4 sources
Severity
7.5HIGHNVD
GHSA6.8OSV6.8
EPSS
0.4%
top 41.07%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Moinmo Moinmoin
Timeline
PublishedMar 29
Latest updateMay 2

Description

MoinMoin 1.7.x before 1.7.3 and 1.8.x before 1.8.3 checks parent ACLs in certain inappropriate circumstances during processing of hierarchical ACLs, which allows remote attackers to bypass intended access restrictions by requesting an item, a different vulnerability than CVE-2008-6603.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

▶NVDmoinmo/moinmoin6 versions+5

Patches

Patch: hg.moinmo.in ↗Patch: hg.moinmo.in ↗Patch: hg.moinmo.in ↗

🔴Vulnerability Details

3
OSV
MoinMoin Improper Access Control vulnerability↗2022-05-02
▶
GHSA
MoinMoin Improper Access Control vulnerability↗2022-05-02
▶
OSV
CVE-2009-4762: MoinMoin 1↗2010-03-29
▶

📋Vendor Advisories

1
Ubuntu
MoinMoin vulnerability↗2010-05-20
▶
CVE-2009-4762 — Improper Access Control in Moinmoin | cvebase