Project: Joomla! SubProject: All Severity: Low Versions: 2.5.3 and all earlier 2.5.x versions Exploit type: Information Disclosure Reported Date: 2012-January-7 Fixed Date: 2012-April-2 Description Inadequate permission checking allows unauthorised viewing of some administrative back end information. Affected Installs Joomla! versions 2.5.3 and all earlier 2.5.x versions Solution Upgrade to version 2.5.4 Reported by Cyrille Barthelemy Contact The JSST at the Joomla! Security Center.
Read more from the original source:
[20120307] – Core – Information Disclosure