[20120303] – Core – Privilege Escalation

Mar15
by Ike on March 15, 2012 at 12:00 pm
Posted In: Uncategorized
  • Project: Joomla!
  • SubProject: All
  • Severity: High
  • Versions: 2.5.2, 2.5.1, 2.5.0, and all 1.7.x and 1.6.x releases
  • Exploit type: Privilege Escalation
  • Reported Date: 2012-March-12
  • Fixed Date: 2012-March-15

Description

Programming error allows privilege escalation in some cases.

Affected Installs

Joomla! versions 2.5.2, 2.5.1, 2.5.0, and all 1.7.x and 1.6.x versions

Solution

Upgrade to version 2.5.3

Reported by Jeff Channel

Contact

The JSST at the Joomla! Security Center.