Joomla Improper Certificate Validation Vulnerability - CVE-2017-11364 - Vulnerability Database

Joomla Improper Certificate Validation Vulnerability - CVE-2017-11364

High

Reference: CVE-2017-11364

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2017-11364

Title: Joomla Improper Certificate Validation Vulnerability

Overview:

The CMS installer in Joomla before 3.7.4 does not verify a user39s ownership of a webspace which allows remote authenticated users to gain control of the target application by leveraging Certificate Transparency logs.