Title: Web Dictate Null Password Authentication Bypass
Info
Disclosure
Sep 03, 2006
Discovery
Unknown
Dates
Exploit
Sep 03, 2006
Solution
Unknown
Description
Web Dictate contains a flaw that may allow a malicious user to gain access to unauthorized privileges. The issue is triggered when a malicious user logs into the 'Admin' account with a null password. This flaw may lead to a loss of integrity.
Classification
Location:
Remote / Network Access
Attack Type:
Authentication Management
Impact:
Loss of Integrity
Exploit:
Exploit Public
OSVDB:
Web Related
Solution
Upgrade to version 1.02 Release or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.