Description
CruiseWorks 1.09e and earlier does not properly restrict user access to certain privileged actions, which allows local users to change the configuration or have other unspecified impact. NOTE: some of these details are obtained from third party information.
References
- 23198 vdb-entry
- http://www.kynos.co.jp/cws-support/index.html
- ADV-2007-1163 vdb-entry
- cruiseworks-security-bypass(33323) vdb-entry
- 34543 vdb-entry
- JVN#73258608 third-party-advisory
- 24674 third-party-advisory