CVE-2015-3163
The admin pages for power types and key types in Beaker before 20.1 do not have any access controls, which allows remote authenticated users to modify power types and key types …
Published: 2017-09-06 · CVSS: Unscored
The admin pages for power types and key types in Beaker before 20.1 do not have any access controls, which allows remote authenticated users to modify power types and key types via navigating to $BEAKER/powertypes and $BEAKER/keytypes respectively.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7