In Arial Campaign Enterprise before 11.0.551, multiple pages are accessible without authentication or authorization.
References
Link | Resource |
---|---|
http://sadgeeksinsnow.blogspot.dk/2012/10/my-first-experiences-bug-hunting-part-2.html | Exploit Third Party Advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/79506 | VDB Entry |
Configurations
Information
Published : 2020-01-10 09:15
Updated : 2020-01-15 12:16
NVD link : CVE-2012-3824
Mitre link : CVE-2012-3824
JSON object : View
CWE
CWE-287
Improper Authentication
Products Affected
arialsoftware
- campaign_enterprise