What is the severity of CVE-2016-9645?

The severity of CVE-2016-9645 is classified as moderate.

How do I fix CVE-2016-9645?

To fix CVE-2016-9645, upgrade to Ikiwiki version 3.20161229 or later.

What was the cause of CVE-2016-9645?

CVE-2016-9645 was caused by an incomplete fix for CVE-2016-10026, allowing editing restriction bypass.

Which versions of Ikiwiki are affected by CVE-2016-9645?

Ikiwiki versions prior to 3.20161229, specifically those before version 2.8, are affected by CVE-2016-9645.

Can Git versions older than 2.8.0 exploit CVE-2016-9645?

Yes, Git versions older than 2.8.0 can exploit the vulnerability outlined in CVE-2016-9645.

Vulnerability/
CVE-2016-9645

medium

6.5

CWE

284

10/4/2018

16/9/2024

CVE-2016-9645: Editing restriction bypass for git revert

First published: Tue Apr 10 2018(Updated: )

The fix for ikiwiki for CVE-2016-10026 was incomplete resulting in editing restriction bypass for git revert when using git versions older than 2.8.0. This has been fixed in 3.20161229.

Credit: security@debian.org

Affected Software	Affected Version	How to fix
debian/ikiwiki		3.20200202.3-1 3.20200202.4-2.1
Ikiwiki Hosting Project	<2.8

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2016-9645?
The severity of CVE-2016-9645 is classified as moderate.
How do I fix CVE-2016-9645?
To fix CVE-2016-9645, upgrade to Ikiwiki version 3.20161229 or later.
What was the cause of CVE-2016-9645?
CVE-2016-9645 was caused by an incomplete fix for CVE-2016-10026, allowing editing restriction bypass.
Which versions of Ikiwiki are affected by CVE-2016-9645?
Ikiwiki versions prior to 3.20161229, specifically those before version 2.8, are affected by CVE-2016-9645.
Can Git versions older than 2.8.0 exploit CVE-2016-9645?
Yes, Git versions older than 2.8.0 can exploit the vulnerability outlined in CVE-2016-9645.

agent/type
agent/author
agent/references
agent/title
agent/weakness
agent/severity
agent/description
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/event
agent/first-publish-date
collector/security-tracker-debian
source/Debian
agent/software-canonical-lookup
agent/source
agent/tags
agent/softwarecombine
collector/nvd-index
agent/software-canonical-lookup-request
package-manager/debian
vendor/ikiwiki
canonical/ikiwiki hosting project

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Frequently Asked Questions

What is the severity of CVE-2016-9645?
The severity of CVE-2016-9645 is classified as moderate.
How do I fix CVE-2016-9645?
To fix CVE-2016-9645, upgrade to Ikiwiki version 3.20161229 or later.
What was the cause of CVE-2016-9645?
CVE-2016-9645 was caused by an incomplete fix for CVE-2016-10026, allowing editing restriction bypass.
Which versions of Ikiwiki are affected by CVE-2016-9645?
Ikiwiki versions prior to 3.20161229, specifically those before version 2.8, are affected by CVE-2016-9645.
Can Git versions older than 2.8.0 exploit CVE-2016-9645?
Yes, Git versions older than 2.8.0 can exploit the vulnerability outlined in CVE-2016-9645.