GCVE-110-CERTCC-2005-258834

Advisory Published

Vulnetix · Advisory published July 13, 2005

WebEOC ties privileges and roles to client-side resources. If an attacker can access a resource directly, that attacker will be granted all the privileges associated with that resource.

Download JSON Open in Console

Risk Scores

certcc-cam

impact18population15exploitation0widely_known5score_current6.834375ease_of_exploitation15

Aliases

CVE-2005-2286

References

WebEOC privileges are based on client-side authorization

advisory

WebEOC privileges are based on client-side authorization

url

WebEOC privileges are based on client-side authorization

url

WebEOC privileges are based on client-side authorization

url

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON