What is CVE-2012-1563?

CVE-2012-1563 is a high-severity software vulnerability (Improper privilege management) with a CVSS score of 7.5. Joomla! before 2.5.3 allows Admin Account Creation.

Is CVE-2012-1563 being actively exploited?

It is not currently in CISA's KEV catalog. Its EPSS exploitation probability is 9%.

What products does CVE-2012-1563 affect?

Tracked products affected include Joomla!. Check the version you run to see whether it is affected.

How do I fix CVE-2012-1563?

Apply the vendor fix promptly. Upgrade affected products to a fixed version.

← All products

CVE-2012-1563

HIGH severity · CVSS 7.5 · Improper privilege management

7.5CVSS HIGH

Summary

Joomla! before 2.5.3 allows Admin Account Creation.

Impact & exploitability

Attack vectorNetwork

Attack complexityLow

Privileges requiredNone

User interactionNone

Confidentiality impactNone

Integrity impactHigh

Availability impactNone

Exploit probability (EPSS)9%

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Affected products we track (1)

Joomla!

Recommendation

Apply the vendor fix promptly. Open any affected product above for its exact safe version.

Additional information

NVD record
https://developer.joomla.org/security/news/395-20120303-core-privilege-escalation.htmlAdvisory
http://www.openwall.com/lists/oss-security/2012/03/19/11Advisory
https://www.exploit-db.com/exploits/41156/Advisory