CVE-2015-3163 | BDVDB-2026-89946 Detail

Description#

The admin pages for power types and key types in Beaker before 20.1 do not have any access controls, which allows remote authenticated users to modify power types and key types via navigating to $BEAKER/powertypes and $BEAKER/keytypes respectively.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.openwall.com/lists/oss-security/2015/05/08/1
https://beaker-project.org/jenkins-results/beaker-review-checks-docs/995/documentation/_build/html/whats-new/release-20.html
https://bugzilla.redhat.com/show_bug.cgi?id=1215034
http://www.securityfocus.com/bid/74567

Exploit#

No public exploit known

History#

Version 12017-09-06Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.