Unrated severityNVD Advisory· Published May 23, 2013· Updated Jun 16, 2026
CVE-2012-6563
CVE-2012-6563
Description
engine/lib/access.php in Elgg before 1.8.5 does not properly clear cached access lists during plugin boot, which allows remote attackers to read private entities via unspecified vectors.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
24cpe:2.3:a:elgg:elgg:*:*:*:*:*:*:*:*+ 23 more
- cpe:2.3:a:elgg:elgg:*:*:*:*:*:*:*:*range: <=1.8.4
- cpe:2.3:a:elgg:elgg:1.7.0:*:*:*:*:*:*:*
- cpe:2.3:a:elgg:elgg:1.7.1:*:*:*:*:*:*:*
- cpe:2.3:a:elgg:elgg:1.7.10:*:*:*:*:*:*:*
- cpe:2.3:a:elgg:elgg:1.7.11:*:*:*:*:*:*:*
- cpe:2.3:a:elgg:elgg:1.7.12:*:*:*:*:*:*:*
- cpe:2.3:a:elgg:elgg:1.7.13:*:*:*:*:*:*:*
- cpe:2.3:a:elgg:elgg:1.7.14:*:*:*:*:*:*:*
- cpe:2.3:a:elgg:elgg:1.7.15:*:*:*:*:*:*:*
- cpe:2.3:a:elgg:elgg:1.7.16:*:*:*:*:*:*:*
- cpe:2.3:a:elgg:elgg:1.7.17:*:*:*:*:*:*:*
- cpe:2.3:a:elgg:elgg:1.7.18:*:*:*:*:*:*:*
- cpe:2.3:a:elgg:elgg:1.7.2:*:*:*:*:*:*:*
- cpe:2.3:a:elgg:elgg:1.7.3:*:*:*:*:*:*:*
- cpe:2.3:a:elgg:elgg:1.7.4:*:*:*:*:*:*:*
- cpe:2.3:a:elgg:elgg:1.7.5:*:*:*:*:*:*:*
- cpe:2.3:a:elgg:elgg:1.7.6:*:*:*:*:*:*:*
- cpe:2.3:a:elgg:elgg:1.7.7:*:*:*:*:*:*:*
- cpe:2.3:a:elgg:elgg:1.7.8:*:*:*:*:*:*:*
- cpe:2.3:a:elgg:elgg:1.7.9:*:*:*:*:*:*:*
- cpe:2.3:a:elgg:elgg:1.8.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:elgg:elgg:1.8.1:*:*:*:*:*:*:*
- cpe:2.3:a:elgg:elgg:1.8.3:*:*:*:*:*:*:*
- (no CPE)range: <1.8.5
Patches
Vulnerability mechanics
References
5- blog.elgg.org/pg/blog/evan/read/209/elgg-185-releasednvdPatchVendor Advisory
- elgg.org/getelgg.phpnvdPatch
- secunia.com/advisories/49129nvdVendor Advisory
- www.securityfocus.com/bid/53623nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/75757nvd
News mentions
0No linked articles in our index yet.