PT-2000-1106 · Allaire · Allaire Spectra

Publicado 2000-01-01 · Atualizado 2018-05-03 · CVE-2000-0120

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Allaire Spectra version 1.0

Description The issue allows users to bypass authentication. This is achieved by manipulating the bAuthenticated parameter in the Remote Access Service invoke.cfm template.

Recommendations For Allaire Spectra version 1.0, consider restricting access to the invoke.cfm template until a fix is available. As a temporary workaround, avoid using the bAuthenticated parameter in the affected template to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2000-0120

Produtos afetados

Allaire Spectra

Referências · 3

• http://securityfocus.com/bid/955 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/4025 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2000-0120 · Nota de Segurança