PT-1999-1763 · Cobalt · Cobalt Raq
Publicado
1999-11-08
·
Atualizado
2016-10-18
·
CVE-1999-1530
CVSS v2.0
3.6
Baixa
| Vetor | AV:L/AC:L/Au:N/C:P/I:P/A:N |
Name of the Vulnerable Software and Affected Versions:
Cobalt RaQ versions 2.0 and 3i
Description:
The issue allows a malicious site administrator to view or modify data located at another virtual site on the same system due to improper user identification for running certain scripts.
Recommendations:
For Cobalt RaQ version 2.0, update the system to properly handle user identification for script execution.
For Cobalt RaQ version 3i, apply a configuration change to ensure correct user mapping for virtual sites.
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Cobalt Raq