CVE-2015-3163

https://notcve.org/view.php?id=CVE-2015-3163

The admin pages for power types and key types in Beaker before 20.1 do not have any access controls, which allows remote authenticated users to modify power types and key types via navigating to $BEAKER/powertypes and $BEAKER/keytypes respectively. Las páginas de administrador para tipos de poderes y de claves en versiones de Beaker anteriores a la 20.1 no tienen ningún control de acceso. Esto permite que atacantes remotos autenticados modifiquen tipos de poderes y tipos de claves navegando a $BEAKER/powertypes and $BEAKER/keytypes respectivamente. • http://www.openwall.com/lists/oss-security/2015/05/08/1 http://www.securityfocus.com/bid/74567 https://beaker-project.org/jenkins-results/beaker-review-checks-docs/995/documentation/_build/html/whats-new/release-20.html https://bugzilla.redhat.com/show_bug.cgi?id=1215034 • CWE-284: Improper Access Control •