The Gallery Remote module in Menalto Gallery before 2.2.4 does not check permissions for unspecified GR commands, which has unknown impact and attack vectors.
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.
Link | Tags |
---|---|
http://gallery.menalto.com/gallery_2.2.4_released | |
http://security.gentoo.org/glsa/glsa-200802-04.xml | vendor advisory |
http://osvdb.org/41668 | vdb entry |
http://secunia.com/advisories/28898 | third party advisory |
http://bugs.gentoo.org/show_bug.cgi?id=203217 |