CVE-2012-6563

Published: May 23, 2013Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

engine/lib/access.php in Elgg before 1.8.5 does not properly clear cached access lists during plugin boot, which allows remote attackers to read private entities via unspecified vectors.

Affected (23)

Products: Elgg: Elgg

Elgg

1 product

Elgg

Configuration A

23 vulnerable

Vulnerable Software	Affected Versions
Elgg Elgg	Up to 1.8.4
Elgg Elgg	Version 1.7.0
Elgg Elgg	Version 1.7.10
Elgg Elgg	Version 1.7.11
Elgg Elgg	Version 1.7.12
Elgg Elgg	Version 1.7.13
Elgg Elgg	Version 1.7.14
Elgg Elgg	Version 1.7.15
Elgg Elgg	Version 1.7.16
Elgg Elgg	Version 1.7.17
Elgg Elgg	Version 1.7.18
Elgg Elgg	Version 1.7.1
Elgg Elgg	Version 1.7.2
Elgg Elgg	Version 1.7.3
Elgg Elgg	Version 1.7.4
Elgg Elgg	Version 1.7.5
Elgg Elgg	Version 1.7.6
Elgg Elgg	Version 1.7.7
Elgg Elgg	Version 1.7.8
Elgg Elgg	Version 1.7.9
Elgg Elgg	Version 1.8.0.1
Elgg Elgg	Version 1.8.1
Elgg Elgg	Version 1.8.3