First published: Wed Aug 17 2005(Updated: )
User.php in Gallery, as used in Postnuke, allows users with any Admin privileges to gain access to all galleries.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
GalleryCMS | =1.3.4 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2005-2596 is considered a high severity vulnerability due to its ability to allow users with admin privileges to access all galleries.
To fix CVE-2005-2596, it is recommended to upgrade to a later version of Gallery that addresses this security issue.
The consequences of CVE-2005-2596 include unauthorized access to all galleries by users with admin rights, potentially leading to data exposure.
CVE-2005-2596 specifically affects Gallery version 1.3.4 and prior versions.
Yes, CVE-2005-2596 is related to Postnuke as it affects the implementation of Gallery within the Postnuke platform.