Sysbotz SimpleData Unspecified Authentication Bypass Vulnerability
BID:9380
Info
Sysbotz SimpleData Unspecified Authentication Bypass Vulnerability
| Bugtraq ID: | 9380 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 07 2004 12:00AM |
| Updated: | Jan 07 2004 12:00AM |
| Credit: | The discovery of this issue has been credited to the vendor. |
| Vulnerable: |
Sysbotz SimpleData 4.0.1 Sysbotz SimpleData 4.0 |
| Not Vulnerable: |
Sysbotz SimpleData 4.0.2 |
Discussion
Sysbotz SimpleData Unspecified Authentication Bypass Vulnerability
It has been reported that SimpleData may be prone to an access validation issue. The vulnerability may present itself when an attacker submits a specially crafted URI. This could permit a remote attacker to gain unauthorized access to a vulnerable site.
SimpleData versions 4.0.1 and prior may be prone to this issue.
It has been reported that SimpleData may be prone to an access validation issue. The vulnerability may present itself when an attacker submits a specially crafted URI. This could permit a remote attacker to gain unauthorized access to a vulnerable site.
SimpleData versions 4.0.1 and prior may be prone to this issue.
Exploit / POC
Sysbotz SimpleData Unspecified Authentication Bypass Vulnerability
No exploit is required.
No exploit is required.
Solution / Fix
Sysbotz SimpleData Unspecified Authentication Bypass Vulnerability
Solution:
The vendor has released SimpleData version 4.0.2 to address this and other issues. Users are advised to contact the vendor to download the fixed version.
Solution:
The vendor has released SimpleData version 4.0.2 to address this and other issues. Users are advised to contact the vendor to download the fixed version.
References
Sysbotz SimpleData Unspecified Authentication Bypass Vulnerability
References:
References:
- SimpleData Product Page (Sysbotz)