wp-admin/plugins.php in WordPress before 3.4.2, when the multisite feature is enabled, does not check for network-administrator privileges before performing a network-wide activation of an installed plugin, which might allow remote authenticated users to make unintended plugin changes by leveraging the Administrator role.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: redhat
Published: 2012-09-14T19:00:00Z
Updated: 2024-09-16T21:02:26.279Z
Reserved: 2012-08-21T00:00:00Z
Link: CVE-2012-4422
Vulnrichment
No data.
NVD
Status : Modified
Published: 2012-09-14T19:55:01.823
Modified: 2024-11-21T01:42:51.330
Link: CVE-2012-4422
Redhat
No data.