First published: Tue Jun 08 2004(Updated: )
Gallery 1.4.3 and earlier allows remote attackers to bypass authentication and obtain Gallery administrator privileges.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
GalleryCMS | =1.4_pl1 | |
GalleryCMS | =1.4.2 | |
GalleryCMS | =1.4.1 | |
GalleryCMS | =1.4.3_pl1 | |
GalleryCMS | =1.4_pl2 | |
GalleryCMS | =1.4 | |
Debian Linux | =3.0 | |
Debian Linux | =3.0 | |
Debian Linux | =3.0 | |
Debian Linux | =3.0 | |
Debian Linux | =3.0 | |
Debian Linux | =3.0 | |
Debian Linux | =3.0 | |
Debian Linux | =3.0 | |
Debian Linux | =3.0 | |
Debian Linux | =3.0 | |
Debian Linux | =3.0 | |
Debian Linux | =3.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2004-0522 is considered to have a high severity due to the potential for remote authentication bypass that grants administrator privileges.
To fix CVE-2004-0522, you should upgrade to Gallery version 1.4.4 or later, as these versions address the vulnerability.
CVE-2004-0522 affects Gallery versions 1.4 and earlier, including specific versions 1.4.1, 1.4.2, and 1.4.3.
Yes, CVE-2004-0522 can be exploited remotely by attackers to gain unauthorized administrator access.
Yes, there are known exploit techniques that leverage CVE-2004-0522 to bypass authentication in affected Gallery installations.