Description

Joomla! 2.5.x before 2.5.25, 3.x before 3.2.4, and 3.3.x before 3.3.4 allows remote attackers to authenticate and bypass intended access restrictions via vectors involving LDAP authentication.

Remediation

References

CVE-2014-6632

Related Vulnerabilities

Apache Traffic Server Improper Input Validation Vulnerability (CVE-2010-2952)

WordPress Plugin WP Data Access Privilege Escalation (5.3.7)

Plone CMS Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2012-5485)

IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-1826)

WordPress Plugin Contact Form for WordPress-Ultimate Form Builder Lite Multiple Vulnerabilities (1.3.6)

Severity

High

Classification

CVE-2014-6632 CWE-287

Tags

Missing Update Known Vulnerabilities