CVE-2010-0288

Published: Feb 15, 2010Modified: Apr 29, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

A typo in the administrator permission check in the ACL Manager plugin (plugins/acl/ajax.php) in DokuWiki before 2009-12-25b allows remote attackers to gain privileges and access closed wikis by editing current ACL statements, as demonstrated in the wild in January 2010.

Affected (29)

Products: Dokuwiki: Dokuwiki

1 product

Configuration A

29 vulnerable

Vulnerable Software	Affected Versions
Dokuwiki Dokuwiki	Up to release_2009-02-14
Dokuwiki Dokuwiki	Version 2004-07-04
Dokuwiki Dokuwiki	Version 2004-07-07
Dokuwiki Dokuwiki	Version 2004-07-12
Dokuwiki Dokuwiki	Version 2004-07-21
Dokuwiki Dokuwiki	Version 2004-07-25
Dokuwiki Dokuwiki	Version 2004-08-08
Dokuwiki Dokuwiki	Version 2004-08-15a
Dokuwiki Dokuwiki	Version 2004-08-22
Dokuwiki Dokuwiki	Version 2004-09-12
Dokuwiki Dokuwiki	Version 2004-09-25
Dokuwiki Dokuwiki	Version 2004-09-30
Dokuwiki Dokuwiki	Version 2004-11-01
Dokuwiki Dokuwiki	Version 2004-11-02
Dokuwiki Dokuwiki	Version 2004-11-10
Dokuwiki Dokuwiki	Version 2005-01-14
Dokuwiki Dokuwiki	Version 2005-01-15
Dokuwiki Dokuwiki	Version 2005-01-16a
Dokuwiki Dokuwiki	Version 2005-02-06
Dokuwiki Dokuwiki	Version 2005-02-18
Dokuwiki Dokuwiki	Version 2005-05-07
Dokuwiki Dokuwiki	Version 2005-07-01
Dokuwiki Dokuwiki	Version 2005-07-13
Dokuwiki Dokuwiki	Version 2005-09-19
Dokuwiki Dokuwiki	Version 2005-09-22
Dokuwiki Dokuwiki	Version 2006-03-05
Dokuwiki Dokuwiki	Version 2006-03-09
Dokuwiki Dokuwiki	Version 2006-03-09e
Dokuwiki Dokuwiki	Version 2006-06-04

Related CWEs

References (24)

http://bugs.splitbrain.org/index.php?do=details&task_id=1847

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2010-February/034729.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2010-February/034831.html

Source: secalert@redhat.com

http://osvdb.org/61710

Source: secalert@redhat.com

http://secunia.com/advisories/38183

Source: secalert@redhat.com

Vendor Advisory

http://security.gentoo.org/glsa/glsa-201301-07.xml

Source: secalert@redhat.com

http://www.debian.org/security/2010/dsa-1976

Source: secalert@redhat.com

http://www.exploit-db.com/exploits/11141

Source: secalert@redhat.com

http://www.securityfocus.com/bid/37820

Source: secalert@redhat.com

http://www.splitbrain.org/blog/2010-01/17-dokuwiki-security

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2010/0150

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/55661

Source: secalert@redhat.com

http://bugs.splitbrain.org/index.php?do=details&task_id=1847

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2010-February/034729.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2010-February/034831.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://osvdb.org/61710

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/38183

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://security.gentoo.org/glsa/glsa-201301-07.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2010/dsa-1976

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.exploit-db.com/exploits/11141

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/37820

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.splitbrain.org/blog/2010-01/17-dokuwiki-security

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2010/0150

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/55661

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.