PT-2000-1279 · Allaire · Allaire Forums

Publicado 2000-04-03 · Atualizado 2008-09-10 · CVE-2000-0297

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Allaire Forums version 2.0.5

Description The issue allows remote attackers to bypass access restrictions to secure conferences. This is achieved by exploiting the rightAccessAllForums or rightModerateAllForums variables.

Recommendations For Allaire Forums version 2.0.5, consider restricting access to the rightAccessAllForums and rightModerateAllForums variables to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2000-0297

Produtos afetados

Allaire Forums

Referências · 4

• http://osvdb.org/1270 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2000-0297 · Nota de Segurança
• http://securityfocus.com/bid/1085 · Nota
• http://www2.allaire.com/handlers/index.cfm?ID=15099&Method=Full · Nota