CVE-2018-14836: Medium severity subrion cms vulnerability
Published Aug 2, 2018
·Updated
Subrion 4.2.1 is vulnerable to Improper Access control because user groups not having access to the Admin panel are able to access it (but not perform actions) if the Guests user group has access to the Admin panel.
Affected Software
1 affected component
Subrion Subrion CMS=4.2.1
Event History
Aug 2, 2018
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-14836?
CVE-2018-14836 has been classified as a high severity vulnerability due to improper access control within Subrion CMS.
2
How do I fix CVE-2018-14836?
To fix CVE-2018-14836, ensure that user groups are correctly configured to restrict access to the Admin panel for unauthorized users.
3
Which versions of Subrion CMS are affected by CVE-2018-14836?
CVE-2018-14836 specifically affects Subrion CMS version 4.2.1.
4
What type of vulnerability is CVE-2018-14836?
CVE-2018-14836 is classified as an improper access control vulnerability.
5
Can users in the Guests group access the Admin panel due to CVE-2018-14836?
Yes, users in the Guests group can access the Admin panel but cannot perform any actions, due to CVE-2018-14836.