DotNetNuke 5.6.2 Core Permission Provider Major Security Issue Patch

DotNetNuke 5.6.2 introduces a legacy security issue regarding Core Permission Provider via User Profile. An authenticated user could access admin level rights from user profile page and this issue could be one of the major security issues of DotNetNuke.



If you are using an earlier version of DotNetNuke i would suggest either upgrading to DotNetNuke 5.6.1 for now, or if you are using latest build then go ahead and apply the temporary workaround from a DotNetNuke Partner...



The issue is still being discussed under following topic >>

The temporary workaround can be applied by replacing a core permission provider dll of DNN.