CVE-2015-3163
N/A
N/A
Summary
The admin pages for power types and key types in Beaker before 20.1 do not have any access controls, which allows remote authenticated users to modify power types and key types via navigating to $BEAKER/powertypes and $BEAKER/keytypes respectively.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CVE Program Container
Additional References
- http://www.openwall.com/lists/oss-security/2015/05/08/1
- https://beaker-project.org/jenkins-results/beaker-review-checks-docs/995/documentation/_build/html/whats-new/release-20.html
- https://bugzilla.redhat.com/show_bug.cgi?id=1215034
- http://www.securityfocus.com/bid/74567
References
- http://www.openwall.com/lists/oss-security/2015/05/08/1
- https://beaker-project.org/jenkins-results/beaker-review-checks-docs/995/documentation/_build/html/whats-new/release-20.html
- https://bugzilla.redhat.com/show_bug.cgi?id=1215034
- http://www.securityfocus.com/bid/74567
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.