CVE-2008-2724 Information

Description

Menalto Gallery before 2.2.5 does not enforce permissions for non-album items that have been protected by a password which might allow remote attackers to bypass intended access restrictions.

Reference

http://gallery.menalto.com/gallery_2.2.5_released http://secunia.com/advisories/30650 http://secunia.com/advisories/30826 http://www.securityfocus.com/bid/29681 https://exchange.xforce.ibmcloud.com/vulnerabilities/43031 https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00766.html https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00836.html