Hosting Controller Unauthorized Access Vulnerability
BID:14393
Info
Hosting Controller Unauthorized Access Vulnerability
| Bugtraq ID: | 14393 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 26 2005 12:00AM |
| Updated: | Jul 26 2005 12:00AM |
| Credit: | zuzi atk <[email protected]> is credited with the discovery of this vulnerability. |
| Vulnerable: |
Hosting Controller Hosting Controller 6.1 Hotfix 2.2 Hosting Controller Hosting Controller 6.1 Hotfix 2.1 |
| Not Vulnerable: | |
Discussion
Hosting Controller Unauthorized Access Vulnerability
Hosting Controller is prone to an unauthorized access vulnerability.
An attacker can manipulate the application to navigate beyond their folder and view the folders for all resellers and Web admin utilizing this instance of the Hosting Controller application. This would result in information disclosure and a loss of confidentiality. Information obtained may also aid in further attacks.
Hosting Controller is prone to an unauthorized access vulnerability.
An attacker can manipulate the application to navigate beyond their folder and view the folders for all resellers and Web admin utilizing this instance of the Hosting Controller application. This would result in information disclosure and a loss of confidentiality. Information obtained may also aid in further attacks.
Exploit / POC
Hosting Controller Unauthorized Access Vulnerability
No exploit is required.
No exploit is required.
Solution / Fix
Hosting Controller Unauthorized Access Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Hosting Controller Unauthorized Access Vulnerability
References:
References:
- Hosting Controller Homepage (Hosting Controller)