PT-2002-1692 · Zmerge · Zmerge

Publicado 2002-09-10 · Atualizado 2016-10-18 · CVE-2002-0664

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ZMerge versions 4.x through 5.x

Description The default Access Control Lists (ACLs) of the administration database provides arbitrary users, including anonymous users, with Manager level access. This access allows users to read or modify import/export scripts.

Recommendations For ZMerge versions 4.x through 5.x, update the default Access Control Lists (ACLs) to restrict Manager level access to authorized users only.

Correção

Identificadores relacionados

CVE-2002-0664

Produtos afetados

Zmerge

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2002-0664 · Nota de Segurança
• http://iss.net/security_center/static/10057.php · Aviso do Fabricante
• http://securityfocus.com/bid/5101 · Nota
• http://marc.info/?l=bugtraq&m=103134154721846&w=2 · Nota