[
http://jira.magnolia-cms.com/browse/MAGNOLIA-3006?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=28292#action_28292
]
Hudson CI server commented on MAGNOLIA-3006:
--------------------------------------------
Integrated in !http://hudson.magnolia-cms.com/nocacheImages/16x16/blue.gif!
[magnolia_main-4.2-branch
#29|http://hudson.magnolia-cms.com/job/magnolia_main-4.2-branch/29/]
MAGNOLIA-3006 Do not allow privilege escalation by user. Backport from
trunk.
> privileges escalation by logged user
> ------------------------------------
>
> Key: MAGNOLIA-3006
> URL: http://jira.magnolia-cms.com/browse/MAGNOLIA-3006
> Project: Magnolia
> Issue Type: Bug
> Components: admininterface, security
> Affects Versions: 4.2.3
> Reporter: Jan Haderka
> Assignee: Jan Haderka
> Priority: Blocker
> Fix For: 4.3
>
>
> Under certain conditions it is possible for knowledgeable user to escalate
> his/her own privileges to more then originally assigned. The "user" in
> question must be valid user with access to admin central. The issue doesn't
> affect anonymous user.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://jira.magnolia-cms.com/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
----------------------------------------------------------------
For list details see
http://www.magnolia-cms.com/home/community/mailing-lists.html
To unsubscribe, E-mail to: <[email protected]>
----------------------------------------------------------------
