Skip to content

CVE-2005-0811 The web interface in NotifyLink 3.0 does not properly restrict access to functions that have been disabled in the GUI, which allows remote authenticated users to bypass intended restrictions via a dir...

MediumCVSS 4.6 EPSS 0.66%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

The web interface in NotifyLink 3.0 does not properly restrict access to functions that have been disabled in the GUI, which allows remote authenticated users to bypass intended restrictions via a direct request to certain URLs.

Affected products

ProductAffected versionsFixed in
notify technology notifylink = enterprise_server No fix listed

References

  • 14617 third-party-advisory
  • VU#131828 third-party-advisory us-government-resource
  • 12843 vdb-entry