tasked Unauthorized Task Disclosure Vulnerability
BID:3745
Info
tasked Unauthorized Task Disclosure Vulnerability
| Bugtraq ID: | 3745 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 12 2001 12:00AM |
| Updated: | Dec 12 2001 12:00AM |
| Credit: | This vulnerability was publicized in the tasked changelog for version 1.3, released on December 12, 2001. |
| Vulnerable: |
tasked tasked 1.1 |
| Not Vulnerable: |
tasked tasked 1.3 |
Discussion
tasked Unauthorized Task Disclosure Vulnerability
tasked is a PHP script which helps maintain a to-do list. It supports multiple users, and uses MySQL for a backend database.
A vulnerability exists in tasked which allows users to view tasks they would not normally have permissions to. Under some applications, this may result in the disclosure of sensitive information.
tasked is a PHP script which helps maintain a to-do list. It supports multiple users, and uses MySQL for a backend database.
A vulnerability exists in tasked which allows users to view tasks they would not normally have permissions to. Under some applications, this may result in the disclosure of sensitive information.
Exploit / POC
tasked Unauthorized Task Disclosure Vulnerability
There is no exploit code required.
There is no exploit code required.
Solution / Fix
tasked Unauthorized Task Disclosure Vulnerability
Solution:
Versions 1.3 and later of tasked do not suffer from this vulnerability.
Solution:
Versions 1.3 and later of tasked do not suffer from this vulnerability.