Progress OpenEdge Multiple Vulnerabilities
BID:45981
Info
Progress OpenEdge Multiple Vulnerabilities
| Bugtraq ID: | 45981 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 24 2011 12:00AM |
| Updated: | Jan 24 2011 12:00AM |
| Credit: | Alexander Polyakov, Alexey Sintsov, Alexey Troshichev of Digital Security Research |
| Vulnerable: |
Progress Software OpenEdge 10.2A |
| Not Vulnerable: | |
Discussion
Progress OpenEdge Multiple Vulnerabilities
Progress OpenEdge is prone to an authentication-bypass vulnerability and a userID-enumeration weakness.
An attacker can exploit these issues to gain unauthorized access to the application or enumerate possible user IDs.
Progress OpenEdge 10.2A is vulnerable; other versions may also be affected.
Progress OpenEdge is prone to an authentication-bypass vulnerability and a userID-enumeration weakness.
An attacker can exploit these issues to gain unauthorized access to the application or enumerate possible user IDs.
Progress OpenEdge 10.2A is vulnerable; other versions may also be affected.
Exploit / POC
Progress OpenEdge Multiple Vulnerabilities
Attackers can exploit these issues using readily available tools.
Attackers can exploit these issues using readily available tools.
Solution / Fix
Progress OpenEdge Multiple Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of any more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of any more recent information, please mail us at: [email protected].
References
Progress OpenEdge Multiple Vulnerabilities
References:
References:
- [DSECRG-11-008] Open Edge RDBMS - Multiple architecture vulnerabilities (UNPAT (Digital Security Research Group)
- OpenEdge Product Page (Progress)