PT-2000-1106 · Allaire · Allaire Spectra
CVE-2000-0120
·
Publicado
2000-01-01
·
Atualizado
2018-05-03
CVSS v2.0
7.5
Alta
| Vetor | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Allaire Spectra version 1.0
Description
The issue allows users to bypass authentication. This is achieved by manipulating the
bAuthenticated parameter in the Remote Access Service invoke.cfm template.Recommendations
For Allaire Spectra version 1.0, consider restricting access to the invoke.cfm template until a fix is available. As a temporary workaround, avoid using the
bAuthenticated parameter in the affected template to minimize the risk of exploitation.Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Allaire Spectra