Description
IBM WebSphere Host On-Demand 6.0, 7.0, 8.0, 9.0, and possibly 10, allows remote attackers to bypass authentication via a modified pnl parameter, related to hod/HODAdmin.html and hod/frameset.html.
References
- websphere-pnl-authentication-bypass(30826) vdb-entry
- 22652 third-party-advisory
- 20061211 Unauthenticated access to IBM Host On-Demand administration pages mailing-list
- 2030 third-party-advisory
- ADV-2006-4943 vdb-entry