Description
Missing authorization vulnerability exists in Movable Type. Under certain conditions, when a user without administrator privileges signs in to the product, unintended update processing may be executed.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Six Apart | Movable Type | 9.1.1 and earlier, 9.0.7 and earlier, 8.8.3 and earlier, 8.0.10 and earlier | — |
| Six Apart | Movable Type Advanced | 9.1.1 and earlie, 9.0.7 and earlier, 8.8.3 and earlier, 8.0.10 and earlier | — |
| Six Apart | Movable Type Premium | 9.1.1 and earlier, 9.0.7 and earlier, 2.15 and earlier (included in Movable Type 8.8.4 and earlier or Movable Type 8.0.11 and earlier) | — |
| Six Apart | Movable Type Premium (Advanced Edition) | 9.1.1 and earlier, 9.0.7 and earlier, 2.15 and earlier (included in Movable Type 8.8.4 and earlier or Movable Type 8.0.11 and earlier) | — |