high7.5
CVE-2012-3475
The installer in the Ushahidi Platform before 2.5 omits certain calls to the exit function, which allows remote attackers to obtain administrative privileges v…
Impact
The installer in the Ushahidi Platform before 2.5 omits certain calls to the exit function, which allows remote attackers to obtain administrative privileges via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ushahidi | Ushahidi Platform | through 2.4.1 Versions 1.0, 1.2, 2.0, 2.1, 2.2 |
References
- NVD record
- CVE.org record
- http://openwall.com/lists/oss-security/2012/08/09/5
- https://github.com/ushahidi/Ushahidi_Web/commit/7892559
- https://github.com/ushahidi/Ushahidi_Web/commit/fcdad03
- http://openwall.com/lists/oss-security/2012/08/09/5
- https://github.com/ushahidi/Ushahidi_Web/commit/7892559
- https://github.com/ushahidi/Ushahidi_Web/commit/fcdad03