OSVDB ID: 10256

Title: Baal Smart Form Admin Change Password Page Unspecified Issue

Info

Disclosure

Sep 21, 2004

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

Baal Smart Form contains a flaw related to the 'Admin Change Password' page that may allow a remote attacker to bypass authentication settings. No further details have been provided.

Classification

Location: Remote / Network Access, Location Unknown
Attack Type: Authentication Management, Attack Type Unknown
Impact: Loss of Integrity
Exploit: Exploit Unknown
Disclosure: OSVDB Verified
OSVDB: Web Related

Solution

Upgrade to version 3.2 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

BaalSystems

Baal Smart Form

3.1

References

Credit

Unknown or Incomplete



Direct URL: http://osvdb.org/10256