Vulnerability in Ushahidi Platform
CVE-2012-3475
The installer in the Ushahidi Platform before 2.5 omits certain calls to the exit function, which allows remote attackers to obtain administrative privileges via unspecified vectors.
EPSS: 0.015 (71.8th percentile) — read the EPSS interpretation.
Affected products
- Ushahidi Ushahidi_platform — versions 1.0, 1.2, 2.0
- N/a — versions n/a
References
- secalert@redhat.com (mailing-list, x_refsource_MLIST)
- secalert@redhat.com (x_refsource_CONFIRM, Patch)
- secalert@redhat.com (x_refsource_CONFIRM, Patch)