CVE-2004-2559: High severity Andreas Gohr Dokuwiki vulnerability
Published Dec 31, 2004
·Updated
DokuWiki before 2004-10-19 allows remote attackers to access administrative functionality including (1) Mediaselectiondialog, (2) Recent changes, (3) feed, and (4) search, possibly due to the lack of ACL checks.
Affected Software
11 affected components
Andreas Gohr Dokuwiki=release_2004-07-04
Andreas Gohr Dokuwiki=release_2004-07-07
Andreas Gohr Dokuwiki=release_2004-07-12
Andreas Gohr Dokuwiki=release_2004-07-21
Andreas Gohr Dokuwiki=release_2004-07-25
Andreas Gohr Dokuwiki=release_2004-08-08
Andreas Gohr Dokuwiki=release_2004-08-15a
Andreas Gohr Dokuwiki=release_2004-08-22
Andreas Gohr Dokuwiki=release_2004-09-12
Andreas Gohr Dokuwiki=release_2004-09-25
Andreas Gohr Dokuwiki=release_2004-09-30
Remediation
Patch Available
Event History
Dec 31, 2004
CVE Published
05:00 AM
Nov 22, 2005
CVE Published
via MITRE·07:00 AM
Data Sourced
via MITRE·07:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-2559?
CVE-2004-2559 is considered a medium severity vulnerability due to potential unauthorized access to administrative functionalities.
2
How do I fix CVE-2004-2559?
To fix CVE-2004-2559, upgrade DokuWiki to a version released after October 19, 2004.
3
What versions of DokuWiki are affected by CVE-2004-2559?
CVE-2004-2559 affects DokuWiki versions released from July 4, 2004, to October 19, 2004.
4
What administrative functionalities are exposed in CVE-2004-2559?
CVE-2004-2559 exposes functionalities such as the Mediaselectiondialog, Recent changes, feed, and search.
5
Who is impacted by CVE-2004-2559?
Users of DokuWiki versions prior to October 19, 2004, are at risk of unauthorized administrative access due to CVE-2004-2559.