CVE Daily

CVE-2008-5846

Six Apart Movable Type (MT) before 4.23 allows remote authenticated users with c...

Medium CVSS 4.0

Overview

Six Apart Movable Type (MT) before 4.23 allows remote authenticated users with create permission for posts to bypass intended access restrictions and publish posts via a "system-wide entry listing screen."

CWE: CWE-264 Published: 2009-01-05T20:30:02.343
Risk analysis

This vulnerability is rated 🟡 MEDIUM.

  • CVSS: 4.0 (MEDIUM)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags