[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f6sAjzRPxuGNCdq8kSbY-I2e2_b4qyVm8JOkJXQJuWjE":3,"g5a-risk:CVE-2015-2172":149},{"success":4,"data":5,"meta":147},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":29,"epssPercentile":15,"epssTimeSeries":30,"severity":31,"affectedProducts":32,"affectedProductsCount":37,"references":38,"referencesCount":94,"weaknesses":95,"weaknessesCount":37,"isActivelyExploited":104,"cisaInfo":15,"otxData":15,"relatedBlogPosts":105,"seoMetadata":106,"configurations":131,"relatedVendorCves":145,"notableEvents":146},"CVE-2015-2172","What is CVE-2015-2172?","DokuWiki before 2014-05-05d and before 2014-09-29c does not properly check permissions for the ACL plugins, which allows remote authenticated users to gain privileges and add or delete ACL rules via a request to the XMLRPC API.","DokuWiki before 2014-05-05d and before 2014-09-29c does not properly check permissions for the ACL plugins, which allows remote authenticated users to gain p...","2015-03-30T14:59:07.07","2025-04-12T10:46:40.837",6.5,"AV:N\u002FAC:L\u002FAu:S\u002FC:P\u002FI:P\u002FA:P",{"CVSSMetricV31":15,"CVSSMetricV30":15,"CVSSMetricV2":16,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"BaseSeverity":26,"ExploitabilityScore":27,"ImpactScore":28,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","NETWORK","LOW","SINGLE","PARTIAL","MEDIUM",8,6.4,0.02862,[29,29,29,29,29,29,29],"Medium",[33],{"vendor":34,"product":34,"version":35,"criteria":36,"vulnerable":4},"dokuwiki","*","cpe:2.3:a:dokuwiki:dokuwiki:*:*:*:*:*:*:*:*",1,[39,44,49,52,55,59,64,68,71,76,78,80,82,84,86,88,90,92],{"url":40,"source":41,"tags":42},"http:\u002F\u002Fadvisories.mageia.org\u002FMGASA-2015-0093.html","Mageia",[43],"Third Party Advisory",{"url":45,"source":46,"tags":47},"http:\u002F\u002Flists.fedoraproject.org\u002Fpipermail\u002Fpackage-announce\u002F2015-March\u002F152994.html","Fedoraproject",[48,43],"Mailing List",{"url":50,"source":46,"tags":51},"http:\u002F\u002Flists.fedoraproject.org\u002Fpipermail\u002Fpackage-announce\u002F2015-March\u002F153062.html",[48,43],{"url":53,"source":46,"tags":54},"http:\u002F\u002Flists.fedoraproject.org\u002Fpipermail\u002Fpackage-announce\u002F2015-March\u002F153266.html",[48,43],{"url":56,"source":57,"tags":58},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2015\u002F03\u002F02\u002F2","Openwall",[48,43],{"url":60,"source":61,"tags":62},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F72827","Securityfocus",[43,63],"VDB Entry",{"url":65,"source":66,"tags":67},"https:\u002F\u002Fgithub.com\u002Fsplitbrain\u002Fdokuwiki\u002Fcommit\u002F4970ad24ce49ec76a0ee67bca7594f918ced2f5f","GitHub",[43],{"url":69,"source":66,"tags":70},"https:\u002F\u002Fgithub.com\u002Fsplitbrain\u002Fdokuwiki\u002Fissues\u002F1056",[43],{"url":72,"source":73,"tags":74},"https:\u002F\u002Fwww.dokuwiki.org\u002Fchanges","Dokuwiki",[75],"Vendor Advisory",{"url":40,"source":41,"tags":77},[43],{"url":45,"source":46,"tags":79},[48,43],{"url":50,"source":46,"tags":81},[48,43],{"url":53,"source":46,"tags":83},[48,43],{"url":56,"source":57,"tags":85},[48,43],{"url":60,"source":61,"tags":87},[43,63],{"url":65,"source":66,"tags":89},[43],{"url":69,"source":66,"tags":91},[43],{"url":72,"source":73,"tags":93},[75],18,[96],{"id":97,"name":98,"description":99,"extendedDescription":100,"status":101,"abstraction":102,"structure":103},"CWE-284","Improper Access Control","The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.","Access control involves the use of several protection mechanisms such as:\nWhen any mechanism is not applied or otherwise fails, attackers can compromise the security of the product by gaining privileges, reading sensitive information, executing commands, evading detection, etc.\nThere are two distinct behaviors that can introduce access control weaknesses:","Incomplete","Pillar","Simple",false,[],{"title":107,"metaDescription":108,"keywords":109,"canonicalUrl":110,"structuredData":111},"What is CVE-2015-2172? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2015-2172, a medium severity cyber security vulnerability from 2015. DokuWiki before 2014-05-05d and before 2014-09-29c does no...","CVE-2015-2172, CVE-2015-2172 vulnerability, CVE-2015-2172 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2015, CVSS score, exploit, patch, remediation, dokuwiki security, dokuwiki vulnerability","\u002Fwhat-is\u002Fcve-2015-2172",{"@context":112,"@type":113,"headline":107,"description":108,"datePublished":10,"dateModified":11,"author":114,"publisher":118,"about":122,"mainEntityOfPage":126,"articleSection":129,"keywords":130},"https:\u002F\u002Fschema.org","TechArticle",{"@type":115,"name":116,"url":117},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":115,"name":116,"url":117,"logo":119},{"@type":120,"url":121},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":123,"name":6,"description":124,"additionalType":125},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":127,"@id":128},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2015-2172","Cybersecurity","CVE-2015-2172, CVE-2015-2172 vulnerability, CVE-2015-2172 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[132],{"Operator":15,"Negate":15,"Nodes":133},[134],{"Operator":135,"Negate":15,"CPEMatch":136},"OR",[137,141],{"Vulnerable":4,"Criteria":36,"MatchCriteriaID":138,"VersionStartExcluding":15,"VersionStartIncluding":139,"VersionEndExcluding":140,"VersionEndIncluding":15},"D9B2745B-1076-4CC6-A38A-4D87D89012A7","2014-05-05","2014-05-05d",{"Vulnerable":4,"Criteria":36,"MatchCriteriaID":142,"VersionStartExcluding":15,"VersionStartIncluding":143,"VersionEndExcluding":144,"VersionEndIncluding":15},"A45B2716-772C-4028-91DC-BE0A74DDA9BF","2014-09-29","2014-09-29c",[],[],{"lastModified":11,"cacheTime":148,"version":21},1792357977267,{"score":150,"band":151,"action":152,"scoredAt":153},25,"Low","Monitor","2026-10-17T07:37:46.001203+00:00"]