Description
The DropDocuments plugin in KnowledgeTree before 3.5.4a allows remote authenticated users to gain administrative privileges via a certain sequence of "browse documents" and dashboard requests.
References
- knowledgetree-dropdocuments-priv-escalation(47530) vdb-entry
- 33277 third-party-advisory
- http://issues.knowledgetree.com/browse/KTS-3921
- http://wiki.knowledgetree.com/Version_3.5.4a#Security
- 32920 vdb-entry