CVE-2012-3475 The installer in the Ushahidi Platform before 2.5 omits certain calls to the exit function, which allows remote attackers to obtain administrative privileges via unspecified vectors.
HighCVSS 7.5
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The installer in the Ushahidi Platform before 2.5 omits certain calls to the exit function, which allows remote attackers to obtain administrative privileges via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ushahidi platform | <= 2.4.1 | No fix listed |
| ushahidi platform | = 1.0 | No fix listed |
| ushahidi platform | = 1.2 | No fix listed |
| ushahidi platform | = 2.0 | No fix listed |
| ushahidi platform | = 2.1 | No fix listed |
| ushahidi platform | = 2.2 | No fix listed |
| ushahidi platform | = 2.2.1 | No fix listed |
| ushahidi platform | = 2.3.1 | No fix listed |
| ushahidi platform | = 2.3.2 | No fix listed |
| ushahidi platform | = 2.4 | No fix listed |
References
- [oss-security] 20120809 Re: CVE request for Ushahidi mailing-list
- github.com patch
- github.com patch