CVE-2013-3057

Joomla! 2.5.x before 2.5.10 and 3.0.x before 3.0.4 allows remote authenticated users to bypass intended privilege requirements and list the privileges of arbitrary users via unspecified vectors.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:S/C:P/I:N/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
VendorProductVersion
joomlajoomla\!
2.5.0
joomlajoomla\!
2.5.1
joomlajoomla\!
2.5.2
joomlajoomla\!
2.5.3
joomlajoomla\!
2.5.4
joomlajoomla\!
2.5.5
joomlajoomla\!
2.5.6
joomlajoomla\!
2.5.7
joomlajoomla\!
2.5.8
joomlajoomla\!
2.5.9
joomlajoomla\!
3.0.0
joomlajoomla\!
3.0.1
joomlajoomla\!
3.0.2
joomlajoomla\!
3.0.3
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://developer.joomla.org/security/82-20130402-core-information-disclosure.html
http://developer.joomla.org/security/82-20130402-core-information-disclosure.html