CVEvulnerability
CVE-2018-17855
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2018-10-09
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 8.8 HIGH — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-269
Description
An issue was discovered in Joomla! before 3.8.13. If an attacker gets access to the mail account of an user who can approve admin verifications in the registration process, he can activate himself.
Affected configurations
• joomla joomla\! (>= 1.5.0 < 3.8.13)
Related
Weakness · CWE (1)
- CWE-269 Improper Privilege Management weakness
References
- http://www.securityfocus.com/bid/105559 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1041914 Third Party Advisory, VDB Entry
- https://developer.joomla.org/security-centre/754-20181004-core-acl-violation-in-com-users-for-the-admin-verification Vendor Advisory
- http://www.securityfocus.com/bid/105559 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1041914 Third Party Advisory, VDB Entry
- https://developer.joomla.org/security-centre/754-20181004-core-acl-violation-in-com-users-for-the-admin-verification Vendor Advisory