CVE-2009-4762 - MoinMoin 1.7.x before 1.7.3 and 1.8.x before 1.8.3 checks parent ACLs in certain inappropriate circumstances during processing of hierarchical ACLs, which allows remote attackers to bypass intended access restrictions by requesting an item, a different vulnerability than CVE-2008-6603

Back Back to CVE browser

HIGH

MoinMoin 1.7.x before 1.7.3 and 1.8.x before 1.8.3 checks parent ACLs in certain inappropriate circumstances during processing of hierarchical ACLs, which allows remote attackers to bypass intended access restrictions by requesting an item, a different vulnerability than CVE-2008-6603

Published Mar 29, 2010

8.7

HIGH

CVSS 4.0

EPSS 3.08%

Description

MoinMoin 1.7.x before 1.7.3 and 1.8.x before 1.8.3 checks parent ACLs in certain inappropriate circumstances during processing of hierarchical ACLs, which allows remote attackers to bypass intended access restrictions by requesting an item, a different vulnerability than CVE-2008-6603.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-264

CWE-284

References (14)

http://hg.moinmo.in/moin/1.7/rev/897cdbe9e8f2
x_refsource_CONFIRMPatch
http://hg.moinmo.in/moin/1.8/rev/897cdbe9e8f2
x_refsource_CONFIRMPatch
http://moinmo.in/SecurityFixes
x_refsource_CONFIRMVendor Advisory
http://secunia.com/advisories/39887
third-party-advisoryx_refsource_SECUNIA
http://ubuntu.com/usn/usn-941-1
vendor-advisoryx_refsource_UBUNTU
http://www.debian.org/security/2010/dsa-2014
vendor-advisoryx_refsource_DEBIAN
http://www.securityfocus.com/bid/35277
vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2010/0600
vdb-entryx_refsource_VUPENVendor Advisory
http://www.vupen.com/english/advisories/2010/1208
vdb-entryx_refsource_VUPEN
https://github.com/advisories/GHSA-jj23-fj2v-m872
Advisory
https://github.com/pypa/advisory-database/tree/main/vulns/moin/PYSEC-2010-13.yaml
https://nvd.nist.gov/vuln/detail/CVE-2009-4762
https://web.archive.org/web/20140805132556/http://secunia.com/advisories/39887
https://web.archive.org/web/20200228153929/http://www.securityfocus.com/bid/35277

Link	Providers	Tags
http://hg.moinmo.in/moin/1.7/rev/897cdbe9e8f2		x_refsource_CONFIRMPatch
http://hg.moinmo.in/moin/1.8/rev/897cdbe9e8f2		x_refsource_CONFIRMPatch
http://moinmo.in/SecurityFixes		x_refsource_CONFIRMVendor Advisory
http://secunia.com/advisories/39887		third-party-advisoryx_refsource_SECUNIA
http://ubuntu.com/usn/usn-941-1		vendor-advisoryx_refsource_UBUNTU
http://www.debian.org/security/2010/dsa-2014		vendor-advisoryx_refsource_DEBIAN
http://www.securityfocus.com/bid/35277		vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2010/0600		vdb-entryx_refsource_VUPENVendor Advisory
http://www.vupen.com/english/advisories/2010/1208		vdb-entryx_refsource_VUPEN
https://github.com/advisories/GHSA-jj23-fj2v-m872		Advisory
https://github.com/pypa/advisory-database/tree/main/vulns/moin/PYSEC-2010-13.yaml
https://nvd.nist.gov/vuln/detail/CVE-2009-4762
https://web.archive.org/web/20140805132556/http://secunia.com/advisories/39887
https://web.archive.org/web/20200228153929/http://www.securityfocus.com/bid/35277

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Mar 29, 2010

Updated Aug 7, 2024

Reserved Mar 29, 2010

Link CVE-2009-4762

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2009-4762

Red Hat

Severity n/a

Public date n/a

Links CVE-2009-4762

GHSA-JJ23-FJ2V-M872