CVE-2005-2187

McAfee IntruShield Security Management System allows remote authenticated users to access the "Generate Reports" feature and modify alerts by setting the Access option to true, as demonstrated using the (1) fullAccess or (2) fullAccessRight parameter in reports-column-center.jsp, or (3) fullAccess parameter to SystemEvent.jsp.
Configurations

Configuration 1 (hide)

cpe:2.3:h:mcafee:intrushield_security_management_system:*:*:*:*:*:*:*:*

History

20 Nov 2024, 23:58

Type Values Removed Values Added
References () http://marc.info/?l=bugtraq&m=112066594312876&w=2 - () http://marc.info/?l=bugtraq&m=112066594312876&w=2 -
References () http://marc.info/?l=bugtraq&m=112076813804503&w=2 - () http://marc.info/?l=bugtraq&m=112076813804503&w=2 -
References () http://secunia.com/advisories/15961 - () http://secunia.com/advisories/15961 -
References () http://securitytracker.com/id?1014422 - () http://securitytracker.com/id?1014422 -

Information

Published : 2005-07-11 04:00

Updated : 2024-11-20 23:58


NVD link : CVE-2005-2187

Mitre link : CVE-2005-2187

CVE.ORG link : CVE-2005-2187


JSON object : View

Products Affected

mcafee

  • intrushield_security_management_system