OpenVAS Administrator CVE-2013-6766 Authentication Bypass Vulnerability

Bugtraq ID:	63634
Class:	Design Error
CVE:	CVE-2013-6766
Remote:	Yes
Local:	No
Published:	Nov 10 2013 12:00AM
Updated:	Nov 19 2013 12:43AM
Credit:	Antonio Sanchez Arago
Vulnerable:
Not Vulnerable:

OpenVAS Administrator CVE-2013-6766 Authentication Bypass Vulnerability

OpenVAS Administrator is prone to an authentication-bypass vulnerability.

An attacker can exploit this issue to bypass the authentication mechanism and perform unauthorized actions. This may aid in further attacks.

Versions prior to OpenVAS Administrator 1.2.2 and 1.3.2 are vulnerable.

OpenVAS Administrator CVE-2013-6766 Authentication Bypass Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

OpenVAS Administrator CVE-2013-6766 Authentication Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

OpenVAS Administrator CVE-2013-6766 Authentication Bypass Vulnerability

References:

• OpenVAS (OpenVAS Project)