CVE-2008-5857 The DropDocuments plugin in KnowledgeTree before 3.5.4a allows remote authenticated users to gain administrative privileges via a certain sequence of "browse documents" and dashboard requests.
MediumCVSS 6.5
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The DropDocuments plugin in KnowledgeTree before 3.5.4a allows remote authenticated users to gain administrative privileges via a certain sequence of "browse documents" and dashboard requests.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| knowledgetree document management | <= 3.5.4 | No fix listed |
| knowledgetree document management | = 3.0.0 | No fix listed |
| knowledgetree document management | = 3.0.1 | No fix listed |
| knowledgetree document management | = 3.0.2 | No fix listed |
| knowledgetree document management | = 3.0.3 | No fix listed |
| knowledgetree document management | = 3.0.3a | No fix listed |
| knowledgetree document management | = 3.0.3b | No fix listed |
| knowledgetree document management | = 3.1 | No fix listed |
| knowledgetree document management | = 3.1a | No fix listed |
| knowledgetree document management | = 3.1b | No fix listed |
| knowledgetree document management | = 3.3 | No fix listed |
| knowledgetree document management | = 3.3.1 | No fix listed |
| knowledgetree document management | = 3.3.2 | No fix listed |
| knowledgetree document management | = 3.3.3 | No fix listed |
| knowledgetree document management | = 3.3.4 | No fix listed |
| knowledgetree document management | = 3.3.5 | No fix listed |
| knowledgetree document management | = 3.3.6 | No fix listed |
| knowledgetree document management | = 3.3.7 | No fix listed |
| knowledgetree document management | = 3.4 | No fix listed |
| knowledgetree document management | = 3.4.1 | No fix listed |
| knowledgetree document management | = 3.4.2 | No fix listed |
| knowledgetree document management | = 3.4.3 | No fix listed |
| knowledgetree document management | = 3.4.4 | No fix listed |
| knowledgetree document management | = 3.4.5 | No fix listed |
| knowledgetree document management | = 3.4.6 | No fix listed |
Show 6 more
| Product | Affected versions | Fixed in |
|---|---|---|
| knowledgetree document management | = 3.4a | No fix listed |
| knowledgetree document management | = 3.5.2 | No fix listed |
| knowledgetree document management | = 3.5.2a | No fix listed |
| knowledgetree document management | = 3.5.2b | No fix listed |
| knowledgetree document management | = 3.5.2c | No fix listed |
| knowledgetree document management | = 3.5.3 | No fix listed |
References
- issues.knowledgetree.com
- 33277 patch third-party-advisory vendor-advisory
- wiki.knowledgetree.com
- 32920 patch vdb-entry
- knowledgetree-dropdocuments-priv-escalation(47530) vdb-entry