The A-Form and A-Form bamboo before 1.3.6 and 2.x before 2.0.3, and A-Form PC and PC/Mobile before 3.1, plug-ins for Movable Type do not require administrative authentication, which allows remote authenticated users to modify data via unspecified vectors.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: jpcert
Published: 2011-11-03T10:00:00
Updated: 2017-08-28T12:57:01
Reserved: 2011-07-07T00:00:00
Link: CVE-2011-2676
JSON object: View
NVD Information
Status : Modified
Published: 2011-11-03T10:55:08.387
Modified: 2017-08-29T01:29:30.037
Link: CVE-2011-2676
JSON object: View
Redhat Information
No data.
CWE