Intrusion PreventionJoomla!.ACL.Security.Privilege.Escalation
Description
This indicates an attack attempt to exploit a Privilege Escalation Vulnerability in Joomla.
The vulnerability is due to lack of input validation while handling ACL rulesets. Successful exploitation can lead can cause write ACL violations.
Affected Products
Joomla! 1.7.0 through 3.9.22
Impact
Privilege Escalation: Remote attackers can leverage their privileges on vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://developer.joomla.org/security-centre/834-20201107-core-write-acl-violation-in-multiple-core-views.html
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2021-01-27 | 17.006 | Default_action:pass:drop |
| 2021-01-21 | 17.005 | Default_action:drop:pass |
| 2021-01-20 | 17.003 | Default_action:pass:drop |
| 2021-01-11 | 16.995 |
| ID | 49718 |
| Created | Dec 31, 2020 |
| Updated | Aug 16, 2021 |
| Risk |
|
| CVE ID | CVE-2020-35616 |
| Exploit Prediction Score | 0.08% |
| Default Action | drop |
| Active | |
| Affected OS | All |
| Affected App | PHP_app |