CVEvulnerability
CVE-2009-4762
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-03-29
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
MoinMoin 1.7.x before 1.7.3 and 1.8.x before 1.8.3 checks parent ACLs in certain inappropriate circumstances during processing of hierarchical ACLs, which allows remote attackers to bypass intended access restrictions by requesting an item, a different vulnerability than CVE-2008-6603.
Affected configurations
• moinmo moinmoin 1.7.0
• moinmo moinmoin 1.7.1
• moinmo moinmoin 1.7.2
• moinmo moinmoin 1.8.0
• moinmo moinmoin 1.8.1
• moinmo moinmoin 1.8.2
Related
Weakness · not in database (1)
References
- http://hg.moinmo.in/moin/1.7/rev/897cdbe9e8f2 Patch
- http://hg.moinmo.in/moin/1.8/rev/897cdbe9e8f2 Patch
- http://moinmo.in/SecurityFixes Vendor Advisory
- http://secunia.com/advisories/39887 secunia.com
- http://ubuntu.com/usn/usn-941-1 ubuntu.com
- http://www.debian.org/security/2010/dsa-2014 www.debian.org
- http://www.securityfocus.com/bid/35277 www.securityfocus.com
- http://www.vupen.com/english/advisories/2010/0600 Vendor Advisory
- http://www.vupen.com/english/advisories/2010/1208 www.vupen.com
- http://hg.moinmo.in/moin/1.7/rev/897cdbe9e8f2 Patch
- http://hg.moinmo.in/moin/1.8/rev/897cdbe9e8f2 Patch
- http://moinmo.in/SecurityFixes Vendor Advisory
- http://secunia.com/advisories/39887 secunia.com
- http://ubuntu.com/usn/usn-941-1 ubuntu.com
- http://www.debian.org/security/2010/dsa-2014 www.debian.org
- http://www.securityfocus.com/bid/35277 www.securityfocus.com
- http://www.vupen.com/english/advisories/2010/0600 Vendor Advisory
- http://www.vupen.com/english/advisories/2010/1208 www.vupen.com