CVE-2008-1099: Medium severity mastodon vulnerability
Published Mar 5, 2008
·Updated
macroGetval in wikimacro.py in MoinMoin 1.5.8 and earlier does not properly enforce ACLs, which allows remote attackers to read protected pages.
Other sources
macroGetval in wikimacro.py in MoinMoin 1.5.8 and earlier does not properly enforce ACLs, which allows remote attackers to read protected pages. The issue has been fixed on 4a7de0173734.
— GitHub
Affected Software
2 affected components
pip/moin<=1.5.8
MoinMoin MoinMoin<=1.5.8
Event History
Mar 5, 2008
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
May 1, 2022
Advisory Published
via GitHub·11:36 PM
Frequently Asked Questions
1
What is the severity of CVE-2008-1099?
CVE-2008-1099 is classified as a moderate severity vulnerability.
2
How do I fix CVE-2008-1099?
To fix CVE-2008-1099, upgrade to MoinMoin version 1.5.9 or later.
3
What versions are affected by CVE-2008-1099?
CVE-2008-1099 affects MoinMoin versions up to and including 1.5.8.
4
What type of vulnerability is CVE-2008-1099?
CVE-2008-1099 is an access control vulnerability that allows unauthorized reading of protected pages.
5
Can CVE-2008-1099 be exploited remotely?
Yes, CVE-2008-1099 can be exploited by remote attackers to bypass access controls.