CVE-2005-2286 WebEOC before 6.0.2 does not properly check user authorization, which allows remote attackers to gain privileges via a direct request to a resource.
HighCVSS 10.0
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
WebEOC before 6.0.2 does not properly check user authorization, which allows remote attackers to gain privileges via a direct request to a resource.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| esi products webeoc | <= 6.0.1 | No fix listed |
References
- VU#258834 patch third-party-advisory us-government-resource
- www.kb.cert.org