CVE-2007-4152 The Visionsoft Audit on Demand Service (VSAOD) in Visionsoft Audit 12.4.0.0 allows remote attackers to conduct replay attacks by capturing and resending data from the DETAILS and PROCESS sections of a...
HighCVSS 9.3
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Visionsoft Audit on Demand Service (VSAOD) in Visionsoft Audit 12.4.0.0 allows remote attackers to conduct replay attacks by capturing and resending data from the DETAILS and PROCESS sections of a session that schedules an audit.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| visionsoft audit | = 12.4.0.0 | No fix listed |
References
- 46980 vdb-entry
- www.portcullis.co.uk vendor-advisory
- 25153 vdb-entry