Review Board CVE-2014-5028 Unauthorized Access Vulnerability

Bugtraq ID:	68871
Class:	Design Error
CVE:	CVE-2014-5028
Remote:	Yes
Local:	No
Published:	Jul 22 2014 12:00AM
Updated:	Jul 22 2014 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	Beanbag Review Board 2.0.3 Beanbag Review Board 1.7.22 Beanbag Review Board 1.7.21 Beanbag Review Board 1.7.17 Beanbag Review Board 1.7.16 Beanbag Review Board 1.7.15 Beanbag Review Board 1.7.14 Beanbag Review Board 1.7.12 Beanbag Review Board 1.7.11 Beanbag Review Board 1.7.10 Beanbag Review Board 1.7.9 Beanbag Review Board 1.6.21 Beanbag Review Board 1.6.20 Beanbag Review Board 1.6.19 Beanbag Review Board 1.6.18 Beanbag Review Board 1.6.17 Beanbag Review Board 1.6.16 Beanbag Review Board 1.5
Not Vulnerable:	Beanbag Review Board 2.0.4 Beanbag Review Board 1.7.27

Review Board CVE-2014-5028 Unauthorized Access Vulnerability

An attacker can exploit this issue using a web browser.

Review Board CVE-2014-5028 Unauthorized Access Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Review Board CVE-2014-5028 Unauthorized Access Vulnerability

References:

• Review Board 1.7.27 Release Notes (Beanbag)
  
• Review Board 2.0.4 Release Notes (Beanbag)
  
• Review Board Homepage (Beanbag)
  
• Re: CVE requests for Review Board (Christian Hammond)