Vulnerabilities > CVE-2020-9514 - Missing Authorization vulnerability in Idxbroker Impress for IDX Broker

CVSS 6.5 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

NONE

Integrity impact

HIGH

Availability impact

NONE

network

low complexity

idxbroker

CWE-862

NVD

Published: 2020-04-07

Updated: 2024-11-21

Summary

An issue was discovered in the IMPress for IDX Broker plugin before 2.6.2 for WordPress. wrappers.php allows a logged-in user (with the Subscriber role) to permanently delete arbitrary posts and pages, create new posts with arbitrary subjects, and modify the subjects of existing posts and pages (via create_dynamic_page and delete_dynamic_page).

Vulnerable Configurations

Part	Description	Count
Application	Idxbroker Idxbroker Impress FOR IDX Broker - Idxbroker Impress FOR IDX Broker 1.0.3 Idxbroker Impress FOR IDX Broker 1.0.4 Idxbroker Impress FOR IDX Broker 1.0.5 Idxbroker Impress FOR IDX Broker 1.0.6 Idxbroker Impress FOR IDX Broker 1.0.7 Idxbroker Impress FOR IDX Broker 1.0.8 Idxbroker Impress FOR IDX Broker 1.0.9 Idxbroker Impress FOR IDX Broker 1.1.0 Idxbroker Impress FOR IDX Broker 1.1.1 Idxbroker Impress FOR IDX Broker 1.1.2 Idxbroker Impress FOR IDX Broker 1.1.3 Idxbroker Impress FOR IDX Broker 1.1.4 Idxbroker Impress FOR IDX Broker 1.1.5 Idxbroker Impress FOR IDX Broker 1.1.6 Idxbroker Impress FOR IDX Broker 1.1.7 Idxbroker Impress FOR IDX Broker 1.2.0 Idxbroker Impress FOR IDX Broker 1.2.1 Idxbroker Impress FOR IDX Broker 1.2.2 Idxbroker Impress FOR IDX Broker 1.2.3 Idxbroker Impress FOR IDX Broker 1.2.4 Idxbroker Impress FOR IDX Broker 1.3.0 Idxbroker Impress FOR IDX Broker 1.3.1 Idxbroker Impress FOR IDX Broker 1.3.2 Idxbroker Impress FOR IDX Broker 2.0.0 Idxbroker Impress FOR IDX Broker 2.0.1 Idxbroker Impress FOR IDX Broker 2.0.2 Idxbroker Impress FOR IDX Broker 2.0.3 Idxbroker Impress FOR IDX Broker 2.1.0 Idxbroker Impress FOR IDX Broker 2.1.1 Idxbroker Impress FOR IDX Broker 2.1.2 Idxbroker Impress FOR IDX Broker 2.1.3 Idxbroker Impress FOR IDX Broker 2.1.4 Idxbroker Impress FOR IDX Broker 2.1.5 Idxbroker Impress FOR IDX Broker 2.2.0 Idxbroker Impress FOR IDX Broker 2.2.1 Idxbroker Impress FOR IDX Broker 2.3.0 Idxbroker Impress FOR IDX Broker 2.3.1 Idxbroker Impress FOR IDX Broker 2.3.2 Idxbroker Impress FOR IDX Broker 2.3.3 Idxbroker Impress FOR IDX Broker 2.3.4 Idxbroker Impress FOR IDX Broker 2.3.5 Idxbroker Impress FOR IDX Broker 2.4.0 Idxbroker Impress FOR IDX Broker 2.4.1 Idxbroker Impress FOR IDX Broker 2.4.2 Idxbroker Impress FOR IDX Broker 2.4.3 Idxbroker Impress FOR IDX Broker 2.4.4 Idxbroker Impress FOR IDX Broker 2.4.5 Idxbroker Impress FOR IDX Broker 2.5.0 Idxbroker Impress FOR IDX Broker 2.5.1 Idxbroker Impress FOR IDX Broker 2.5.2 Idxbroker Impress FOR IDX Broker 2.5.3 Idxbroker Impress FOR IDX Broker 2.5.4 Idxbroker Impress FOR IDX Broker 2.5.5 Idxbroker Impress FOR IDX Broker 2.5.6 Idxbroker Impress FOR IDX Broker 2.5.7 Idxbroker Impress FOR IDX Broker 2.5.8 Idxbroker Impress FOR IDX Broker 2.5.9 Idxbroker Impress FOR IDX Broker 2.5.10 Idxbroker Impress FOR IDX Broker 2.5.11 Idxbroker Impress FOR IDX Broker 2.5.12 Idxbroker Impress FOR IDX Broker 2.6.0 Idxbroker Impress FOR IDX Broker 2.6.1	63

Common Weakness Enumeration (CWE)

CWE-862 - Missing Authorization

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References