OSVDB ID: 7391

Title: AppWeb Mixed Case URL Authorization Bypass

Info

Disclosure
Jul 01, 2004

Discovery
Unknown

Dates

Exploit
Jul 01, 2004

Solution
Unknown

Description

 Mbedthis's AppWeb contains a flaw related to the secured URLs that may allow an attacker to access secured URLs without proper authentication by mixing cases. No further details have been provided.

Classification

 Location: Remote / Network Access
Attack Type: Input Manipulation
Impact: Loss of Confidentiality
Exploit: Exploit Public
Disclosure: OSVDB Verified

Solution

 Upgrade to version 1.1.3 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

Mbedthis Software, LLC.

AppWeb

 1.0.3
1.1.2
1.1.1
1.1

References

Credit
  • Ziv Kamir - vulncodeyahoo.com -


Direct URL: http://osvdb.org/7391