medium4.3
CVE-2010-5089
SilverStripe before 2.4.2 does not properly restrict access to pages in draft mode, which allows remote attackers to obtain sensitive information.
Impact
SilverStripe before 2.4.2 does not properly restrict access to pages in draft mode, which allows remote attackers to obtain sensitive information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Silverstripe | Silverstripe | through 2.4.1 Versions 2.0.0, 2.0.1, 2.0.2, 2.1.0, 2.1.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://doc.silverstripe.org/sapphire/en/trunk/changelogs//2.4.2
- http://open.silverstripe.org/changeset/110757
- http://www.openwall.com/lists/oss-security/2012/04/30/1
- http://www.openwall.com/lists/oss-security/2012/04/30/3
- http://www.openwall.com/lists/oss-security/2012/05/01/3
- http://doc.silverstripe.org/sapphire/en/trunk/changelogs//2.4.2
- http://open.silverstripe.org/changeset/110757
- http://www.openwall.com/lists/oss-security/2012/04/30/1
- http://www.openwall.com/lists/oss-security/2012/04/30/3
- http://www.openwall.com/lists/oss-security/2012/05/01/3