Description
WebEOC before 6.0.2 does not properly check user authorization, which allows remote attackers to gain privileges via a direct request to a resource.
References
- http://www.kb.cert.org/vuls/id/JGEI-6BWLWG
- VU#258834 third-party-advisory
Unscored
CVE-2005-2286
EUVD-2005-2287GHSA-w4x3-7f33-w4j5
WebEOC before 6.0.2 does not properly check user authorization, which allows remote attackers to gain privileges via a direct request to a …
Published Jul 17, 2005 · Updated Sep 17, 2024 · Assigned by mitre