CVE-2016-10026

ikiwiki 3.20161219 does not properly check if a revision changes the access permissions for a page on sites with the git and recentchanges plugins and the CGI interface enabled, which allows remote attackers to revert certain changes by leveraging permissions to change the page before the revision was made.

• CWE-284

• http://ikiwiki.info/bugs/rcs_revert_can_bypass_authorization_if_affected_files_were_renamed/Issue Tracking, Vendor Advisory
• http://www.debian.org/security/2017/dsa-3760
• http://www.openwall.com/lists/oss-security/2016/12/21/3Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/12/29/3Mailing List, Third Party Advisory
• https://ikiwiki.info/security/#index46h2Vendor Advisory
• http://ikiwiki.info/bugs/rcs_revert_can_bypass_authorization_if_affected_files_were_renamed/Issue Tracking, Vendor Advisory
• http://www.debian.org/security/2017/dsa-3760
• http://www.openwall.com/lists/oss-security/2016/12/21/3Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/12/29/3Mailing List, Third Party Advisory
• https://ikiwiki.info/security/#index46h2Vendor Advisory

Published

Feb 13, 2017

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-10020Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-10021Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-10022Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-10023Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-10024Xen through 4.8.x allows local x86 PV guest OS kernel admini…
• CVE-2016-10025VMFUNC emulation in Xen 4.6.x through 4.8.x on x86 systems u…
• CVE-2016-10027Race condition in the XMPP library in Smack before 4.1.9, wh…5.9
• CVE-2016-10028The virgl_cmd_get_capset function in hw/display/virtio-gpu-3…5.5
• CVE-2016-10029The virtio_gpu_set_scanout function in QEMU (aka Quick Emula…5.5
• CVE-2016-1003Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2016-10030The _prolog_error function in slurmd/req.c in Slurm before 1…
• CVE-2016-10031WampServer 3.0.6 installs two services called 'wampapache' a…