Web Content Management Administrator Account Unauthorized Access Vulnerability

Bugtraq ID:	14465
Class:	Access Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Aug 03 2005 12:00AM
Updated:	Aug 03 2005 12:00AM
Credit:	rgod is credited with the discovery of this vulnerability.
Vulnerable:	web content management web content management
Not Vulnerable:

Web Content Management Administrator Account Unauthorized Access Vulnerability

Web content management is prone to an unauthorized access vulnerability. This issue is due to a failure in the application to ensure proper access to administrative functions.

An attacker can exploit this vulnerability to access the vulnerable application with full administrative privileges. This may also aid in further attacks against the underlying system; other attacks are also possible.

Web Content Management Administrator Account Unauthorized Access Vulnerability

No exploit is required.

Web Content Management Administrator Account Unauthorized Access Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Web Content Management Administrator Account Unauthorized Access Vulnerability

References:

• web content management homepage (web content management)
  
• Web Content Management News System Administrative Account creation & cross site (rgod)