PT-2007-6938 · Bughotel · Bughotel Reservation System

Publicado 2007-11-16 · Atualizado 2008-09-05 · CVE-2007-6011

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions BugHotel Reservation System versions prior to 4.9.9 P3

Description The issue allows remote attackers to bypass authentication and gain administrative access. The details of the vulnerability are obtained from third-party information, and its provenance is unknown.

Recommendations For versions prior to 4.9.9 P3, update to version 4.9.9 P3 or later to resolve the issue. As a temporary workaround, consider restricting access to the administrative interface until the update is applied.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2007-6011

Produtos afetados

Bughotel Reservation System

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2007-6011 · Nota de Segurança
• http://securityfocus.com/bid/26178 · Correção