CVE-2013-3499

Name of the Vulnerable Software and Affected Versions GroundWork Monitor Enterprise version 6.7.0

Description The issue allows remote attackers to gain administrative privileges or access files by crafting a specific HTTP header.

Recommendations For GroundWork Monitor Enterprise version 6.7.0, consider modifying the authentication mechanism to not rely solely on the HTTP Referer header, as a temporary workaround, until a patch is available. Restrict access to sensitive areas of the application to minimize the risk of exploitation.