Description
MoveSortedContentAction in C1 Financial Services Contelligent 9.1.4 does not check "the additional environment security configuration," which allows remote attackers with write permissions to reorder components.
References
- contelligent-sortedcontent-security-bypass(32775) vdb-entry
- 22785 vdb-entry
- ADV-2007-0814 vdb-entry
- http://www.contelligent.com/contell/cms/c1web/contelligent/site/contelligent/changelog.html?fromRelease=9.1.4
- 24364 third-party-advisory
- 33497 vdb-entry