PT-2005-1840 · Notifylink · Notifylink

Publicado 2005-03-20 · Atualizado 2008-09-05 · CVE-2005-0811

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions NotifyLink version 3.0

Description The issue concerns the web interface in NotifyLink, where access to certain functions is not properly restricted. This allows remote authenticated users to bypass intended restrictions by making direct requests to specific URLs.

Recommendations For NotifyLink version 3.0, consider restricting access to the vulnerable URLs to minimize the risk of exploitation. As a temporary workaround, limit the functionality accessible through the web interface until a proper fix is available.

Correção

Identificadores relacionados

CVE-2005-0811

Produtos afetados

Notifylink

Referências · 4

• http://secunia.com/advisories/14617 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-0811 · Nota de Segurança
• http://kb.cert.org/vuls/id/131828 · Nota
• http://securityfocus.com/bid/12843 · Nota