PT-2016-6691
CVE-2016-5807
·
Published
2016-07-15
·
Updated
2016-11-28
Description by
CVSS 3.1
8.1
HighMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions
Tollgrade LightHouse SMS versions prior to 5.1 patch 3
Description
The issue allows remote authenticated users to bypass an intended administrative-authentication requirement. This enables them to read or change parameter values by making a direct request.
Recommendations
For versions prior to 5.1 patch 3, update to version 5.1 patch 3 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾