CVE-2004-0522 Gallery 1.4.3 and earlier allows remote attackers to bypass authentication and obtain Gallery administrator privileges.
HighCVSS 10.0
EPSS 2.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Gallery 1.4.3 and earlier allows remote attackers to bypass authentication and obtain Gallery administrator privileges.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gallery project gallery | = 1.4 | No fix listed |
| gallery project gallery | = 1.4.1 | No fix listed |
| gallery project gallery | = 1.4.2 | No fix listed |
| gallery project gallery | = 1.4.3_pl1 | No fix listed |
| gallery project gallery | = 1.4_pl1 | No fix listed |
| gallery project gallery | = 1.4_pl2 | No fix listed |
| debian linux | = 3.0 | No fix listed |
References
- 11752 third-party-advisory
- GLSA-200406-10 vendor-advisory
- DSA-512 patch vendor-advisory
- 10451 patch vdb-entry vendor-advisory
- gallery-user-bypass-authentication(16301) vdb-entry