DescriptionThe administrative interface for Django 1.3.x before 1.3.6, 1.4.x before 1.4.4, and 1.5 before release candidate 2 does not check permissions for the history view, which allows remote authenticated administrators to obtain sensitive object history information.
Overall state of this security issue: Resolved
This issue is currently not rated by SUSE as it is not affecting the SUSE Enterprise products.
|National Vulnerability Database|
SUSE Security Advisories:
- SUSE-SU-2013:1062-1, published Thu Jun 20 15:04:31 MDT 2013
- openSUSE-SU-2013:1203-1, published Tue, 16 Jul 2013 13:04:11 +0200 (CEST)
- openSUSE-SU-2013:1248-1, published Wed, 24 Jul 2013 15:04:32 +0200 (CEST)
SUSE Timeline for this CVECVE page created: Fri Jun 28 09:04:32 2013
CVE page last modified: Sat Jul 1 11:19:34 2023