CWE Code: 284
Vulnerability Type: privilege_escalation
CVSS Score: 6.5
CWE Name:  Improper Access Control
Summary: dokuwiki before 2014-05-05d and before 2014-09-29c does not properly check permissions for the acl plugins, which allows remote authenticated users to gain privileges and add or delete acl rules via a request to the xmlrpc api.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2015-03-30
Last Modified Date: 2019-02-05