CVE-2012-2315: Medium severity openkm vulnerability
admin/Auth in OpenKM 5.1.7 and other versions before 5.1.8-2 does not properly enforce privileges for changing user roles, which allows remote authenticated users to assign administrator privileges to arbitrary users via the userEdit action.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-2315?
CVE-2012-2315 is classified as a high severity vulnerability due to its potential to grant unauthorized administrative privileges.
How do I fix CVE-2012-2315?
To fix CVE-2012-2315, upgrade to OpenKM version 5.1.8-2 or later where the privilege enforcement has been properly implemented.
What versions of OpenKM are affected by CVE-2012-2315?
CVE-2012-2315 affects OpenKM versions prior to 5.1.8-2, specifically 5.1.7 and earlier versions.
Who is at risk from CVE-2012-2315?
Remote authenticated users with limited privileges could exploit CVE-2012-2315 to escalate their privileges to administrator.
What is the main issue with CVE-2012-2315?
The main issue with CVE-2012-2315 is the lack of proper privilege enforcement, allowing unauthorized role changes in user accounts.