CVE-2015-7899

The com_content component in Joomla! 3.x before 3.4.5 does not properly check ACLs, which allows remote attackers to obtain sensitive information via unspecified vectors.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2015-10-29

Last modified

2024-08-06

Weaknesses

CWE-284

Affected products

• Joomla! (Joomla)

References

• http://developer.joomla.org/security-centre/630-20151003-core-acl-violations.html
• http://www.securitytracker.com/id/1033950