In Arial Campaign Enterprise before 11.0.551, multiple pages are accessible without authentication or authorization.
References
Link | Resource |
---|---|
http://sadgeeksinsnow.blogspot.dk/2012/10/my-first-experiences-bug-hunting-part-2.html | Exploit Third Party Advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/79506 | VDB Entry |
Configurations
History
No history.
Information
Published : 2020-01-10 17:15
Updated : 2024-02-04 20:39
NVD link : CVE-2012-3824
Mitre link : CVE-2012-3824
CVE.ORG link : CVE-2012-3824
JSON object : View
Products Affected
arialsoftware
- campaign_enterprise
CWE
CWE-287
Improper Authentication