Secure Portal and Secure Dept Portal Page Restriction Security Bypass Vulnerability

Bugtraq ID:	38905
Class:	Access Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Mar 23 2010 12:00AM
Updated:	Mar 23 2010 12:00AM
Credit:	Reported by the vendor.
Vulnerable:	Wolf Software Secure Portal 0 Wolf Software Secure Dept Portal 0
Not Vulnerable:	Wolf Software Secure Portal 4.5 Wolf Software Secure Dept Portal 1.2

Secure Portal and Secure Dept Portal Page Restriction Security Bypass Vulnerability

Secure Portal and Secure Dept Portal are prone to a security-bypass vulnerability.

An attacker can exploit the issue to gain unauthorized access to certain portions of the affected application.

Versions prior to Secure Portal 3.5.0 and Secure Dept Portal 1.2.0 are vulnerable.

Secure Portal and Secure Dept Portal Page Restriction Security Bypass Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of any more recent information, please mail us at: [email protected].

Secure Portal and Secure Dept Portal Page Restriction Security Bypass Vulnerability

References:

• Secure Dept Portal Changelog (Wolf Software)
  
• Secure Portal Changelog (Wolf Software)
  
• Vendor Homepage (Wolf Software)