← Back

CVE-2011-2676

nvd nist
Published: Nov 3, 2011Modified: Apr 29, 2026

JSON object

Loading...
5.5
Vector
AV:N/AC:L/Au:S/C:N/I:P/A:P
Exploitability: 8.0 / Impact: 4.9
Source: NVD

Description

The A-Form and A-Form bamboo before 1.3.6 and 2.x before 2.0.3, and A-Form PC and PC/Mobile before 3.1, plug-ins for Movable Type do not require administrative authentication, which allows remote authenticated users to modify data via unspecified vectors.

Affected (6)

Ark Web
4 products
A Form
A Form Bamboo
A Form Pc
A Form Pc Mobile
Configuration A
6 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Ark Web
A Form
Up to 1.3.5
A Form
Version 2.0.2
Ark Web
A Form Bamboo
Version 1.3.5
A Form Bamboo
Version 2.0.2
A Form Pc
Up to 3.0
A Form Pc Mobile
Up to 3.0
Running on/withPlatform Versions
Six Apart
Movable Type
All versions

Related CWEs

CWE-287
Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (10)

Source: vultures@jpcert.or.jp
Source: vultures@jpcert.or.jp
Source: vultures@jpcert.or.jp
Patch
Source: vultures@jpcert.or.jp
Patch
Source: vultures@jpcert.or.jp
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.