PT-2007-6938 · Bughotel · Bughotel Reservation System

Published 2007-11-16 · Updated 2008-09-05 · CVE-2007-6011

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions BugHotel Reservation System versions prior to 4.9.9 P3

Description The issue allows remote attackers to bypass authentication and gain administrative access. The details of the vulnerability are obtained from third-party information, and its provenance is unknown.

Recommendations For versions prior to 4.9.9 P3, update to version 4.9.9 P3 or later to resolve the issue. As a temporary workaround, consider restricting access to the administrative interface until the update is applied.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2007-6011

Affected Products

Bughotel Reservation System

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2007-6011 · Security Note
• http://securityfocus.com/bid/26178 · Patch