CVE-2014-6632

Joomla! 2.5.x before 2.5.25, 3.x before 3.2.4, and 3.3.x before 3.3.4 allows remote attackers to authenticate and bypass intended access restrictions via vectors involving LDAP authentication.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2014-10-08

Last modified

2024-08-06

Weaknesses

CWE-287

Affected products

• Joomla! (Joomla)

References

• http://developer.joomla.org/security/594-20140902-core-unauthorised-logins.html
• http://secunia.com/advisories/61606
• http://secunia.com/advisories/61638