CVE:CVE-2012-1031
CNNVD:CNNVD-201202-146
使用Forms认证的某些配置中的EPiServer CMS 5、6版本至6R2版本中存在未明安全漏洞。远程认证用户可利用该漏洞通过利用Edit Mode权限，获取对WebAdmins的访问。
solution:Upgrade episerver episerver_cms to a higher version than 5.1.422.4,5.1.422.122,5.1.422.256,5.1.422.267,5.2.375.7,5.2.375.133,5.2.375.236,6.0.530.0,6.1.379.0,and avoid the version 5.1.422.4,5.1.422.122,5.1.422.256,5.1.422.267,5.2.375.7,5.2.375.133,5.2.375.236,6.0.530.0,6.1.379.0