Description
Missing authorization vulnerability exists in Movable Type. Under certain conditions, when a user without administrator privileges signs in to the product, unintended update processing may be executed.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Six Apart Ltd. Movable Type
9.1.1 and earlieraffected
Six Apart Ltd. Movable Type
9.0.7 and earlieraffected
Six Apart Ltd. Movable Type
8.8.3 and earlieraffected
Six Apart Ltd. Movable Type
8.0.10 and earlieraffected
Six Apart Ltd. Movable Type Advanced
9.1.1 and earlieaffected
Six Apart Ltd. Movable Type Advanced
9.0.7 and earlieraffected
Six Apart Ltd. Movable Type Advanced
8.8.3 and earlieraffected
Six Apart Ltd. Movable Type Advanced
8.0.10 and earlieraffected
Six Apart Ltd. Movable Type Premium
9.1.1 and earlieraffected
Six Apart Ltd. Movable Type Premium
9.0.7 and earlieraffected
Six Apart Ltd. Movable Type Premium
2.15 and earlier (included in Movable Type 8.8.4 and earlier or Movable Type 8.0.11 and earlier)affected
Six Apart Ltd. Movable Type Premium (Advanced Edition)
9.1.1 and earlieraffected
Six Apart Ltd. Movable Type Premium (Advanced Edition)
9.0.7 and earlieraffected
Six Apart Ltd. Movable Type Premium (Advanced Edition)
2.15 and earlier (included in Movable Type 8.8.4 and earlier or Movable Type 8.0.11 and earlier)affected