CVE-2007-2746 The viewList function in lib/WebGUI/Asset/Wobject/DataForm.pm in Plain Black WebGUI before 7.3.14 does not properly use data structures containing privilege information, which allows remote authentica...
LowCVSS 3.5
EPSS 0.92%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The viewList function in lib/WebGUI/Asset/Wobject/DataForm.pm in Plain Black WebGUI before 7.3.14 does not properly use data structures containing privilege information, which allows remote authenticated users to obtain sensitive information or possibly have other unspecified impact.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| plain black webgui | <= 7.3.14 | No fix listed |
References
- 36566 vdb-entry
- 25355 third-party-advisory
- www.plainblack.com exploit
- ADV-2007-1840 vdb-entry