CVE-2006-2942: Medium severity twiki twiki vulnerability
TWiki 4.0.0, 4.0.1, and 4.0.2 allows remote attackers to gain Twiki administrator privileges via a TWiki.TWikiRegistration form with a modified action attribute that references the Sandbox web instead of the user web, which can then be used to associate the user's login name with the WikiName of a member of the TWikiAdminGroup.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-2942?
CVE-2006-2942 is considered to be a critical vulnerability due to its impact on privilege escalation.
How do I fix CVE-2006-2942?
To fix CVE-2006-2942, upgrade TWiki to version 4.0.3 or later to ensure that the vulnerability is patched.
What versions of TWiki are affected by CVE-2006-2942?
CVE-2006-2942 affects TWiki versions 4.0.0, 4.0.1, and 4.0.2.
Can CVE-2006-2942 be exploited remotely?
Yes, CVE-2006-2942 can be exploited remotely by attackers without requiring physical access to the server.
What kind of attack does CVE-2006-2942 enable?
CVE-2006-2942 enables attackers to gain administrator privileges within TWiki, compromising the security of the installation.