Info

Disclosure

Aug 12, 2005

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

MindAlign contains a flaw that may lead to an unauthorized information disclosure. The issue is triggered through an unspecified user enumeration issue, which will disclose user account information resulting in a loss of confidentiality.

Classification

Location: Remote / Network Access
Attack Type: Information Disclosure
Impact: Loss of Confidentiality
Disclosure: OSVDB Verified

Solution

Upgrade to version 6.0 or higher, as it has been reported to fix this vulnerability. In addition, Parlano has released a patch for some older versions. Contact Parlano support at support@parlano.com for an upgrade.

Products

Parlano, Inc.

MindAlign

5.0

References

Bugtraq ID: 14562
Secunia Advisory ID: 16408
Related OSVDB ID: 18755 18756 18757
CVE ID: 2005-2591 (see also: NVD)
ISS X-Force ID: 21821
Vendor URL: http://www.parlano.com/mindalign/default.aspx
Other Advisory URL: http://www.uniras.gov.uk/niscc/docs/br-20050812-00673.html

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/18754