PT-2007-4062 · Plain Black · Webgui

Published 2007-05-17 · Updated 2011-03-08 · CVE-2007-2746

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Low

Base vector

AV:N/AC:M/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions WebGUI versions prior to 7.3.14

Description The issue is related to the viewList function in lib/WebGUI/Asset/Wobject/DataForm.pm, which does not properly utilize data structures containing privilege information. This allows remote authenticated users to potentially obtain sensitive information or have other unspecified impact.

Recommendations For versions prior to 7.3.14, update to version 7.3.14 or later to resolve the issue.

Exploit

Fix

Related Identifiers

CVE-2007-2746

Affected Products

Webgui

References · 5

• 🔥 http://plainblack.com/bugs/tracker/dataform-security-bug · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-2746 · Security Note
• http://secunia.com/advisories/25355 · Note
• http://osvdb.org/36566 · Note
• http://vupen.com/english/advisories/2007/1840 · Note