Description (CNA)
The web interface in NotifyLink 3.0 does not properly restrict access to functions that have been disabled in the GUI, which allows remote authenticated users to bypass intended restrictions via a direct request to certain URLs.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://secunia.com/advisories/14617
- http://www.kb.cert.org/vuls/id/131828
- http://www.securityfocus.com/bid/12843
ADP enrichment
No English description supplied.