CVE-2016-9081: Critical severity Joomla Joomla\! vulnerability
Published Jan 23, 2017
·Updated
Joomla! 3.4.4 through 3.6.3 allows attackers to reset username, password, and user group assignments and possibly perform other user account modifications via unspecified vectors.
Affected Software
33 affected components
Joomla Joomla\!=3.4.4
Joomla Joomla\!=3.4.5
Joomla Joomla\!=3.4.6
Joomla Joomla\!=3.4.7
Joomla Joomla\!=3.4.8
Joomla Joomla\!=3.4.8-rc
Joomla Joomla\!=3.5.0
Joomla Joomla\!=3.5.0-beta
Joomla Joomla\!=3.5.0-beta2
Joomla Joomla\!=3.5.0-beta3
Joomla Joomla\!=3.5.0-beta4
Joomla Joomla\!=3.5.0-beta5
Joomla Joomla\!=3.5.0-rc
Joomla Joomla\!=3.5.0-rc2
Joomla Joomla\!=3.5.0-rc3
Joomla Joomla\!=3.5.0-rc4
Joomla Joomla\!=3.5.1
Joomla Joomla\!=3.5.1-rc
Joomla Joomla\!=3.5.1-rc2
Joomla Joomla\!=3.6.0
Joomla Joomla\!=3.6.0-alpha
Joomla Joomla\!=3.6.0-beta1
Joomla Joomla\!=3.6.0-beta2
Joomla Joomla\!=3.6.0-rc
Joomla Joomla\!=3.6.0-rc2
Joomla Joomla\!=3.6.1
Joomla Joomla\!=3.6.1-rc1
Joomla Joomla\!=3.6.1-rc2
Joomla Joomla\!=3.6.2
Joomla Joomla\!=3.6.3
Joomla Joomla\!=3.6.3-rc1
Joomla Joomla\!=3.6.3-rc2
Joomla Joomla\!=3.6.3-rc3
Remediation
Event History
Jan 23, 2017
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Data Sourced
via NVD·09:59 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2016-9081?
CVE-2016-9081 is considered a critical vulnerability that allows unauthorized modifications to user accounts.
2
How do I fix CVE-2016-9081?
To fix CVE-2016-9081, upgrade your Joomla! installation to a version equal to or greater than 3.6.4.
3
What versions of Joomla! are affected by CVE-2016-9081?
Joomla! versions 3.4.4 through 3.6.3 are affected by CVE-2016-9081.
4
What types of modifications can be performed due to CVE-2016-9081?
CVE-2016-9081 allows attackers to reset usernames, passwords, and user group assignments.
5
Can CVE-2016-9081 be exploited remotely?
Yes, CVE-2016-9081 can be exploited remotely if the attacker can access the vulnerable Joomla! installation.