2017-08-02 16:29:00 2017-08-04 17:24:38

The CMS installer in Joomla! before 3.7.4 does not verify a user's ownership of a webspace, which allows remote authenticated users to gain control of the target application by leveraging Certificate Transparency logs.

Vector

NETWORK

Complexity

LOW

Authentication

SINGLE_INSTANCE

Confidentiality

PARTIAL

Integrity

PARTIAL

Availability

PARTIAL
Joomla! 3.4.1 Joomla Joomla! 3.4.3 (not an official CPE) Joomla! 2.5.13 Joomla! 1.5.15:rc Joomla! 3.0.4 Joomla! 3.4.0 Joomla Joomla! 3.6.0 Alpha (not an official CPE) Joomla Joomla! 3.4.4 (not an official CPE) Joomla Joomla! 3.5.0 Beta (not an official CPE) Joomla! 3.0.1 Joomla! 3.0.2 Joomla! 3.0.3 Joomla! 1.5.14 Joomla! 1.5.6 Joomla! 1.5.15 Joomla! 1.5.7 Joomla! 1.5.8 Joomla! 1.5.13 Joomla! 1.5.9 Joomla! 1.5.10 Joomla Joomla! 1.0.7 (not an official CPE) Joomla! 1.5.11 Joomla Joomla! 1.0.8 (not an official CPE) Joomla! 1.5.16 Joomla Joomla! 1.0.9 (not an official CPE) Joomla Joomla! 1.0.3 (not an official CPE) Joomla Joomla! 1.0.4 (not an official CPE) Joomla Joomla! 1.0.5 (not an official CPE) Joomla Joomla! 1.0.6 (not an official CPE) Joomla! 1.5.18 Joomla! 1.5.19 Joomla Joomla! 1.0.0 (not an official CPE) Joomla Joomla! 1.0.1 (not an official CPE) Joomla! 1.5.17 Joomla Joomla! 1.0.2 (not an official CPE) Joomla! 3.4.1 Release Candidate 2 Joomla! 3.4.1 Release Candidate 1 Joomla Joomla! 3.6.0 Beta2 (not an official CPE) Joomla Joomla! 2.5.18 (not an official CPE) Joomla Joomla! 2.5.19 (not an official CPE) Joomla! 3.0.0 Joomla Joomla! 3.6.0 Beta1 (not an official CPE) Joomla! 2.5.10 Joomla Joomla! 2.5.17 (not an official CPE) Joomla! 2.5.12 Joomla! 3.4.0 Release Candidate 1 Joomla! 2.5.11 Joomla! 2.5.14 Joomla! 3.4.2 Release Candidate 1 Joomla! 1.6 Alpha 2 Joomla Joomla! 2.5.16 (not an official CPE) Joomla Joomla! 2.5.15 (not an official CPE) Joomla Joomla! 3.4.8 (not an official CPE) Joomla Joomla! 3.3.2 (not an official CPE) Joomla Joomla! 3.3.3 (not an official CPE) Joomla Joomla! 3.3.4 (not an official CPE) Joomla Joomla! 3.7.0 (not an official CPE) Joomla! 1.6 Release Candidate 1 Joomla Joomla! 3.4.5 (not an official CPE) Joomla Joomla! 3.4.6 (not an official CPE) Joomla Joomla! 3.4.7 (not an official CPE) Joomla Joomla! 3.3.1 (not an official CPE) Joomla! 1.5.23 Joomla! 3.3.5 Joomla Joomla! 3.7.1 (not an official CPE) Joomla Joomla! 3.3.0 (not an official CPE) Joomla! 1.6 Beta 12 Joomla! 1.6 Beta 14 Joomla! 2.5.2 Joomla! 1.6 Beta 11 Joomla! 1.7.0 Joomla! 2.5.3 Joomla! 1.7.1 Joomla! 1.6 Beta 13 Joomla! 1.7.2 Joomla! 2.5.1 Joomla! 1.7.3 Joomla! 1.6 Beta 15 Joomla! 2.5.4 Joomla! 2.5.0 Joomla Joomla! 2.5.20 (not an official CPE) Joomla Joomla! 3.6.3 Rc3 (not an official CPE) Joomla Joomla! 3.5.0 Rc2 (not an official CPE) Joomla Joomla! 2.5.24 (not an official CPE) Joomla Joomla! 3.6.3 Rc2 (not an official CPE) Joomla Joomla! 3.6.3 Rc1 (not an official CPE) Joomla! 1.5.12 Joomla Joomla! 1.0.11 (not an official CPE) Joomla! 1.5.25 Joomla! 1.5.26 Joomla Joomla! 3.5.0 Rc (not an official CPE) Joomla! 1.5.24 Joomla Joomla! 3.5.1 Rc (not an official CPE) Joomla Joomla! 1.0.15 (not an official CPE) Joomla! 1.5.21 Joomla! 1.5.22 Joomla Joomla! 1.0.10 (not an official CPE) Joomla! 1.5.20 Joomla Joomla! 1.0.12 (not an official CPE) Joomla Joomla! 1.0.13 (not an official CPE) Joomla Joomla! 1.0.14 (not an official CPE) Joomla Joomla! 3.5.0 Rc4 (not an official CPE) Joomla Joomla! 3.5.0 Rc3 (not an official CPE) Joomla Joomla! 3.2.3 (not an official CPE) Joomla Joomla! 3.2.4 (not an official CPE) Joomla Joomla! 3.6.0 (not an official CPE) Joomla Joomla! 3.2.5 (not an official CPE) Joomla Joomla! 3.6.1 (not an official CPE) Joomla! 1.6 Beta 7 Joomla! 1.6 Beta 4 Joomla Joomla! 3.3.6 (not an official CPE) Joomla Joomla! 3.7.2 (not an official CPE) Joomla Joomla! 3.7.3 (not an official CPE) Joomla! 1.6 Beta 6 Joomla! 1.6 Beta 3 Joomla Joomla! 3.2.2 (not an official CPE) Joomla! 1.6 Beta 5 Joomla! 1.6 Beta 2 Joomla Joomla! 3.2.6 (not an official CPE) Joomla Joomla! 3.6.2 (not an official CPE) Joomla! 1.6 Beta 1 Joomla Joomla! 3.2.0 (not an official CPE) Joomla! 2.5.9 Joomla Joomla! 3.2.1 (not an official CPE) Joomla! 2.5.6 Joomla! 1.6 Beta 8 Joomla! 1.7.4 Joomla! 2.5.7 Joomla! 1.7.5 Joomla! 2.5.5 Joomla! 1.6.1 Joomla! 1.6 Beta 9 Joomla Joomla! 1.6.2 (not an official CPE) Joomla! 2.5.8 Joomla! 1.6.3 Joomla! 1.6.4 Joomla Joomla! 2.5.21 (not an official CPE) Joomla Joomla! 2.5.28 (not an official CPE) Joomla! 1.6 Alpha Joomla Joomla! 2.5.23 (not an official CPE) Joomla Joomla! 2.5.22 (not an official CPE) Joomla! 1.6.0 Joomla Joomla! 2.5.25 (not an official CPE) Joomla Joomla! 2.5.27 (not an official CPE) Joomla Joomla! 2.5.26 (not an official CPE) Joomla! 1.6 Beta10 Joomla! 3.4.0 Beta 2 Joomla Joomla! 3.6.0 Rc2 (not an official CPE) Joomla! 3.4.0 Beta 1 Joomla! 3.4.0 Beta 3 Joomla Joomla! 3.6.0 Rc (not an official CPE) Joomla Joomla! 3.6.1 Rc2 (not an official CPE) Joomla Joomla! 3.6.1 Rc1 (not an official CPE) Joomla! 3.1.4 Joomla Joomla! 3.5.0 (not an official CPE) Joomla! 3.1.5 Joomla Joomla! 3.5.1 (not an official CPE) Joomla Joomla! 3.1.6 (not an official CPE) Joomla Joomla! 3.2.7 (not an official CPE) Joomla Joomla! 3.6.3 (not an official CPE) Joomla Joomla! 3.6.4 (not an official CPE) Joomla Joomla! 3.6.5 (not an official CPE) Joomla! 3.1.3 Joomla! 3.1.0 Joomla! 3.1.1 Joomla! 3.1.2 Joomla! 1.6.5 Joomla! 1.6.6 Joomla! 1.5.2 Joomla! 1.5.3 Joomla! 1.5.4 Joomla! 1.5.5 Joomla! 1.5.0 Joomla! 1.5.1 Joomla Joomla! 3.5.0 Beta2 (not an official CPE) Joomla Joomla! 3.5.0 Beta3 (not an official CPE) Joomla Joomla! 3.5.0 Beta4 (not an official CPE) Joomla Joomla! 3.5.0 Beta5 (not an official CPE) Joomla! 3.4.0 Alpha Joomla Joomla! 3.4.8 Rc (not an official CPE)