high7.5
CVE-2014-6632
Joomla!
Impact
Joomla! 2.5.x before 2.5.25, 3.x before 3.2.4, and 3.3.x before 3.3.4 allows remote attackers to authenticate and bypass intended access restrictions via vectors involving LDAP authentication.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Joomla | Joomla\! | Versions 2.5.0, 2.5.1, 2.5.2, 2.5.3, 2.5.4, 2.5.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://developer.joomla.org/security/594-20140902-core-unauthorised-logins.html
- http://secunia.com/advisories/61606
- http://secunia.com/advisories/61638
- http://developer.joomla.org/security/594-20140902-core-unauthorised-logins.html
- http://secunia.com/advisories/61606
- http://secunia.com/advisories/61638