Invision Power Board IP.Board Unspecified Security Bypass Vulnerability

Bugtraq ID:	59654
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	May 03 2013 12:00AM
Updated:	May 03 2013 12:00AM
Credit:	John Jean of the Wargan Solutions
Vulnerable:	Invision Power Services Invision Power Board 3.3.1 Invision Power Services Invision Power Board 3.3 Invision Power Services Invision Power Board 3.2.3 Invision Power Services Invision Power Board 3.2.2 Invision Power Services Invision Power Board 3.2.1 Invision Power Services Invision Power Board 3.2
Not Vulnerable:

Invision Power Board IP.Board Unspecified Security Bypass Vulnerability

Invision Power Board IP.Board is prone to unspecified security-bypass vulnerability.

Successful exploits may allow attackers to bypass certain security restrictions and perform unauthorized actions.

Invision Power Board IP.Board versions 3.2.x, 3.3.x, and 3.4.x are vulnerable.

Invision Power Board IP.Board Administrator Account Security Bypass Vulnerability

An attacker can exploit this issue using a web browser.

Invision Power Board IP.Board Unspecified Security Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Invision Power Board IP.Board Unspecified Security Bypass Vulnerability

References:

• IP.Board Homepage (Invision Power Services)