CVE-2007-2713 ifdate 2.x sends a redirect to the web browser but does not exit when administrative credentials are missing, which allows remote attackers to obtain administrative access via a direct request for the...
HighCVSS 10.0
EPSS 2.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
ifdate 2.x sends a redirect to the web browser but does not exit when administrative credentials are missing, which allows remote attackers to obtain administrative access via a direct request for the admin/ URI.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ifusionservices ifdate | = 2.0 | No fix listed |
| ifusionservices ifdate | = 2.0.3 | No fix listed |
References
- 36173 vdb-entry
- 25237 third-party-advisory
- 2707 third-party-advisory
- www.expw0rm.com
- 20070513 ifdate 2.* unauthorized administrative access bug mailing-list
- 23971 vdb-entry
- ifdate2-admin-auth-bypass(34257) vdb-entry