Description
Joomla! 2.5.x before 2.5.10 and 3.0.x before 3.0.4 allows remote authenticated users to bypass intended privilege requirements and list the privileges of arbitrary users via unspecified vectors.
References (1)
Core 1
Core References
Vendor Advisory x_refsource_confirm
http://developer.joomla.org/security/82-20130402-core-information-disclosure.html
Scores
EPSS
0.0001
EPSS Percentile
0.3%
Details
CWE
CWE-264
Status
published
Products (14)
joomla/joomla\!
2.5.0
joomla/joomla\!
2.5.1
joomla/joomla\!
2.5.2
joomla/joomla\!
2.5.3
joomla/joomla\!
2.5.4
joomla/joomla\!
2.5.5
joomla/joomla\!
2.5.6
joomla/joomla\!
2.5.7
joomla/joomla\!
2.5.8
joomla/joomla\!
2.5.9
... and 4 more
Published
May 03, 2013
Tracked Since
Feb 18, 2026