CVE-2012-3475

The installer in the Ushahidi Platform before 2.5 omits certain calls to the exit function, which allows remote attackers to obtain administrative privileges via unspecified vectors.

Score

CVSS 2.0 7.5 High

Status

Modified - secalert@redhat.com

Published

2012-08-12

Last modified

2024-09-17

Affected products

• Ushahidi Platform (Ushahidi)

References

• http://openwall.com/lists/oss-security/2012/08/09/5
• https://github.com/ushahidi/Ushahidi_Web/commit/7892559
• https://github.com/ushahidi/Ushahidi_Web/commit/fcdad03