Vulnerability in Openkm

CVE-2012-2315

admin/Auth in OpenKM 5.1.7 and other versions before 5.1.8-2 does not properly enforce privileges for changing user roles, which allows remote authenticated users to assign administrator privileges to arbitrary users via the userEdit action.

EPSS: 0.062 (92.8th percentile) — read the EPSS interpretation.

Affected products

  • Openkm — versions 5.1.8
  • N/a — versions n/a

Weakness classification (CWE)

References