CVE-2012-3473

Published: Aug 12, 2012Modified: Apr 29, 2026

6.4

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Exploitability: 10.0 / Impact: 4.9

Source: NVD

Description

The (1) reports API and (2) administration feature in the comments API in the Ushahidi Platform before 2.5 do not require authentication, which allows remote attackers to generate reports and organize comments via API functions.

Affected (10)

Products: Ushahidi: Ushahidi Platform

Ushahidi

1 product

Ushahidi Platform

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Ushahidi Ushahidi Platform	Up to 2.4.1
Ushahidi Ushahidi Platform	Version 1.0
Ushahidi Ushahidi Platform	Version 1.2
Ushahidi Ushahidi Platform	Version 2.0
Ushahidi Ushahidi Platform	Version 2.1
Ushahidi Ushahidi Platform	Version 2.2.1
Ushahidi Ushahidi Platform	Version 2.2
Ushahidi Ushahidi Platform	Version 2.3.1
Ushahidi Ushahidi Platform	Version 2.3.2
Ushahidi Ushahidi Platform	Version 2.4