CVE-2018-14836

Subrion 4.2.1 is vulnerable to Improper Access control because user groups not having access to the Admin panel are able to access it (but not perform actions) if the Guests user group has access to the Admin panel.

Score

CVSS 3.0 6.5 Medium

Status

Modified - cve@mitre.org

Published

2018-08-02

Last modified

2024-08-05

Weaknesses

CWE-269

Affected products

• Subrion Cms (Subrion)

References

• https://github.com/intelliants/subrion/issues/762