CVE-2011-5085: High severity six apart movable type vulnerability
Published Apr 2, 2012
·Updated
Unspecified vulnerability in Movable Type 4.x before 4.36 and 5.x before 5.05 allows remote attackers to read or modify data via unknown vectors.
Affected Software
55 affected components
Sixapart Movable Type=4.0
Sixapart Movable Type=4.1-beta2
Sixapart Movable Type=4.24
Sixapart Movable Type=4.1-beta
Sixapart Movable Type=4.2-rc5
Sixapart Movable Type=4.0-beta6
Sixapart Movable Type=4.23
Sixapart Movable Type=4.36
Sixapart Movable Type=4.0-rc2
Sixapart Movable Type=4.261
Sixapart Movable Type=4.0-beta4
Sixapart Movable Type=4.35
Sixapart Movable Type=4.29
Sixapart Movable Type=4.26
Sixapart Movable Type=4.15-beta4
Sixapart Movable Type=4.0-beta5
Sixapart Movable Type=4.0-beta7
Sixapart Movable Type=4.0-rc1
Sixapart Movable Type=4.0-beta
Sixapart Movable Type=4.21
Sixapart Movable Type=4.12
Sixapart Movable Type=4.2
Sixapart Movable Type=4.291
Sixapart Movable Type=4.0-rc3
Sixapart Movable Type=4.2-rc4
Sixapart Movable Type=4.27
Sixapart Movable Type=4.28
Sixapart Movable Type=4.15-beta3
Sixapart Movable Type=4.01-beta
Sixapart Movable Type=4.25
Sixapart Movable Type=4.01
Sixapart Movable Type=4.2-rc2
Sixapart Movable Type=4.0-beta3
Sixapart Movable Type=4.292
Sixapart Movable Type=4.15-beta1
Sixapart Movable Type=4.22
Sixapart Movable Type=4.1
Sixapart Movable Type=4.1-rc1
Sixapart Movable Type=4.01-rc1
Sixapart Movable Type=4.01-beta2
Sixapart Movable Type=4.0-beta2
Sixapart Movable Type=5.05
Sixapart Movable Type=5.031
Sixapart Movable Type=5.03
Sixapart Movable Type=5.0-beta1
Sixapart Movable Type=5.01
Sixapart Movable Type=5.0-rc1
Sixapart Movable Type=5.04
Sixapart Movable Type=5.0
Sixapart Movable Type=5.0-beta4
Sixapart Movable Type=5.0-rc3
Sixapart Movable Type=5.0-rc2
Sixapart Movable Type=5.02
Sixapart Movable Type=5.0-beta2
Sixapart Movable Type=5.0-beta3
Remediation
Event History
Apr 2, 2012
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-5085?
The severity of CVE-2011-5085 is not explicitly stated but is categorized as a critical weakness that could allow remote attackers to read or modify data.
2
How do I fix CVE-2011-5085?
To fix CVE-2011-5085, you should update Movable Type to version 4.36 or 5.05 or later, which contains security patches.
3
What versions of Movable Type are affected by CVE-2011-5085?
CVE-2011-5085 affects Movable Type versions prior to 4.36 and all 5.x versions prior to 5.05.
4
Can CVE-2011-5085 be exploited remotely?
Yes, CVE-2011-5085 allows remote attackers to exploit the vulnerability without authentication.
5
What are the potential impacts of CVE-2011-5085?
The potential impacts of CVE-2011-5085 include unauthorized reading or modification of sensitive data.