privileges escalation by logged user
------------------------------------
Key: MAGNOLIA-3006
URL: http://jira.magnolia-cms.com/browse/MAGNOLIA-3006
Project: Magnolia
Issue Type: Bug
Components: admininterface, security
Affects Versions: 4.2.3
Reporter: Jan Haderka
Assignee: Philipp Bärfuss
Priority: Blocker
Under certain conditions it is possible for knowledgeable user to escalate
his/her own privileges to more then originally assigned. The "user" in question
must be valid user with access to admin central. The issue doesn't affect
anonymous user.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://jira.magnolia-cms.com/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
----------------------------------------------------------------
For list details see
http://www.magnolia-cms.com/home/community/mailing-lists.html
To unsubscribe, E-mail to: <[email protected]>
----------------------------------------------------------------
