VWE-2017-3858 Printable Version

https://www.vaultwiki.org/pages/Book/Documentation/VWE-2017-3858
This page is a chapter in Info Known Vulnerabilities

This page has been seen 194,040 times.

- Created by
  pegasus
  on August 6, 2017
  
  Last updated by
  pegasus
  on February 15, 2018

Common Name None
VWE-ID VWE-2017-3858
Related Report #5191
Severity MEDIUM
Exploit Difficulty NORMAL
Platform Affects all platforms supported by the vulnerable versions.
Description Permissions escalation. Setting all custom or mask permissions to Not Set resulted in no change being saved; however, the admin was presented with a success message. If the change would have revoked permissions, the admin is unaware that none were revoked.

Discovered July 30, 2017
Resolved August 6, 2017
Patches Available 4.0.18 Patch Level 1
4.0.17 Patch Level 3
4.0.16 Patch Level 4
4.0.15 Patch Level 8
4.0.14 Patch Level 11
4.0.13 Patch Level 11
The versions listed below are known to be affected by this issue. If you are using one of those versions, you should update to a newer release that has no known vulnerabilities.

Common Name	None
VWE-ID	VWE-2017-3858
Related Report	#5191
Severity	MEDIUM
Exploit Difficulty	NORMAL
Platform	Affects all platforms supported by the vulnerable versions.
Description	Permissions escalation. Setting all custom or mask permissions to Not Set resulted in no change being saved; however, the admin was presented with a success message. If the change would have revoked permissions, the admin is unaware that none were revoked.
Discovered	July 30, 2017
Resolved	August 6, 2017
Patches Available	4.0.18 Patch Level 1 4.0.17 Patch Level 3 4.0.16 Patch Level 4 4.0.15 Patch Level 8 4.0.14 Patch Level 11 4.0.13 Patch Level 11