RUCKUS WIRELESS ZoneDirector Authentication Bypass Vulnerability

Bugtraq ID:	60212
Class:	Access Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	May 27 2013 12:00AM
Updated:	May 27 2013 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	RUCKUS WIRELESS ZoneDirector 9.5 RUCKUS WIRELESS ZoneDirector 9.4 RUCKUS WIRELESS ZoneDirector 9.3
Not Vulnerable:	RUCKUS WIRELESS ZoneDirector 9.5.1 0.50 RUCKUS WIRELESS ZoneDirector 9.4.3 0.16 RUCKUS WIRELESS ZoneDirector 9.3.4 0.17

RUCKUS WIRELESS ZoneDirector Authentication Bypass Vulnerability

RUCKUS WIRELESS ZoneDirector is prone to an authentication-bypass vulnerability.

Remote attackers can exploit this issue to gain unauthorized access and perform administrative actions.

RUCKUS WIRELESS ZoneDirector versions 9.3.x, 9.4.x and 9.5.x are vulnerable.
http://drupal.org/node/207891

RUCKUS WIRELESS ZoneDirector Authentication Bypass Vulnerability

An attacker can exploit this issue using a web browser.

RUCKUS WIRELESS ZoneDirector Authentication Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

RUCKUS WIRELESS ZoneDirector Authentication Bypass Vulnerability

References:

• RUCKUS WIRELESS Homepage (RUCKUS WIRELESS)
  
• RUCKUS ADVISORY ID 031813-2: User authentication bypass vulnerability in ZoneDir (RUCKUS WIRELESS)