CVE-2016-9081 Joomla! 3.4.4 through 3.6.3 allows attackers to reset username, password, and user group assignments and possibly perform other user account modifications via unspecified vectors.
CriticalCVSS 9.8
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Joomla! 3.4.4 through 3.6.3 allows attackers to reset username, password, and user group assignments and possibly perform other user account modifications via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| joomla | = 3.4.4 | No fix listed |
| joomla | = 3.4.5 | No fix listed |
| joomla | = 3.4.6 | No fix listed |
| joomla | = 3.4.7 | No fix listed |
| joomla | = 3.4.8 | No fix listed |
| joomla | = 3.4.8-rc | No fix listed |
| joomla | = 3.5.0 | No fix listed |
| joomla | = 3.5.0-beta | No fix listed |
| joomla | = 3.5.0-beta2 | No fix listed |
| joomla | = 3.5.0-beta3 | No fix listed |
| joomla | = 3.5.0-beta4 | No fix listed |
| joomla | = 3.5.0-beta5 | No fix listed |
| joomla | = 3.5.0-rc | No fix listed |
| joomla | = 3.5.0-rc2 | No fix listed |
| joomla | = 3.5.0-rc3 | No fix listed |
| joomla | = 3.5.0-rc4 | No fix listed |
| joomla | = 3.5.1 | No fix listed |
| joomla | = 3.5.1-rc | No fix listed |
| joomla | = 3.5.1-rc2 | No fix listed |
| joomla | = 3.6.0 | No fix listed |
| joomla | = 3.6.0-alpha | No fix listed |
| joomla | = 3.6.0-beta1 | No fix listed |
| joomla | = 3.6.0-beta2 | No fix listed |
| joomla | = 3.6.0-rc | No fix listed |
| joomla | = 3.6.0-rc2 | No fix listed |
Show 8 more
| Product | Affected versions | Fixed in |
|---|---|---|
| joomla | = 3.6.1 | No fix listed |
| joomla | = 3.6.1-rc1 | No fix listed |
| joomla | = 3.6.1-rc2 | No fix listed |
| joomla | = 3.6.2 | No fix listed |
| joomla | = 3.6.3 | No fix listed |
| joomla | = 3.6.3-rc1 | No fix listed |
| joomla | = 3.6.3-rc2 | No fix listed |
| joomla | = 3.6.3-rc3 | No fix listed |
References
- 93969 third-party-advisory vdb-entry
- developer.joomla.org patch vendor-advisory