CVE-2012-1599

Joomla! 1.5.x before 1.5.26 does not properly check permissions, which allows attackers to obtain sensitive "administrative back end information" via unknown vectors. NOTE: this might be a duplicate of CVE-2012-1611.

Score

CVSS 2.0 5.0 Medium

Status

Modified - secalert@redhat.com

Published

2012-12-03

Last modified

2024-09-16

Weaknesses

CWE-264

Affected products

• Joomla! (Joomla)

References

• http://developer.joomla.org/security/news/397-20120306-core-information-disclosure.html
• http://www.openwall.com/lists/oss-security/2012/03/29/5