CVEvulnerability

CVE-2013-3057

4.0 MEDIUM Published 2013-05-03 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2013-05-03
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
Weaknesses: CWE-264

Description

Joomla! 2.5.x before 2.5.10 and 3.0.x before 3.0.4 allows remote authenticated users to bypass intended privilege requirements and list the privileges of arbitrary users via unspecified vectors.

Affected configurations

• joomla joomla\! 2.5.0 • joomla joomla\! 2.5.1 • joomla joomla\! 2.5.2 • joomla joomla\! 2.5.3 • joomla joomla\! 2.5.4 • joomla joomla\! 2.5.5 • joomla joomla\! 2.5.6 • joomla joomla\! 2.5.7 • joomla joomla\! 2.5.8 • joomla joomla\! 2.5.9 • joomla joomla\! 3.0.0 • joomla joomla\! 3.0.1 • joomla joomla\! 3.0.2 • joomla joomla\! 3.0.3

Weakness · not in database (1)

CWE-264

References

http://developer.joomla.org/security/82-20130402-core-information-disclosure.html Vendor Advisory
http://developer.joomla.org/security/82-20130402-core-information-disclosure.html Vendor Advisory

CVE-2013-3057

Description

Affected configurations

Related

Weakness · not in database (1)

References