OSVDB ID: 83742 Title: Quest Foglight Multiple Admin Page Access Restriction Bypass |
Info |
|
|
Dates |
||||
|
|
Description |
Quest Foglight contains a flaw that is triggered when the program fails to properly restrict access to multiple administrator pages. This may allow a remote attacker to bypass authentication and perform administrative actions. |
Classification |
Location:
Remote / Network Access
Attack Type: Input Manipulation Impact: Loss of Integrity Solution: Solution Unknown Exploit: Exploit Unknown Disclosure: Vendor Verified |
Solution |
The vendor has indicated that this will be fixed in the next major release as of 2012-07-10, but has not given exact details. |
Products |
|
References |
|
Credit |
Unknown or Incomplete |