CVE-2008-1099

Advisory

_macro_Getval in wikimacro.py in MoinMoin 1.5.8 and earlier does not properly enforce ACLs, which allows remote attackers to read protected pages.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

This vulnerability has no description

Resources

• http://hg.moinmo.in/moin/1.5/rev/4a7de0173734
• http://moinmo.in/SecurityFixes
• http://www.debian.org/security/2008/dsa-1514
• http://www.securityfocus.com/bid/28177
• http://secunia.com/advisories/29262
• http://www.gentoo.org/security/en/glsa/glsa-200803-27.xml
• http://secunia.com/advisories/29444
• https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00510.html
• https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00538.html
• http://secunia.com/advisories/30031
• http://secunia.com/advisories/33755
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41038
• https://usn.ubuntu.com/716-1/
• https://nvd.nist.gov/vuln/detail/CVE-2008-1099
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1099