CVE-2008-5857

The DropDocuments plugin in KnowledgeTree before 3.5.4a allows remote authenticated users to gain administrative privileges via a certain sequence of "browse documents" and dashboard requests.

Score

CVSS 2.0 6.5 Medium

Status

Modified - cve@mitre.org

Published

2009-01-06

Last modified

2024-08-07

Affected products

• Knowledgetree Document Management (Knowledgetree Document Management)

References

• http://issues.knowledgetree.com/browse/KTS-3921
• http://secunia.com/advisories/33277
• http://wiki.knowledgetree.com/Version_3.5.4a#Security
• http://www.securityfocus.com/bid/32920
• https://exchange.xforce.ibmcloud.com/vulnerabilities/47530