Description
Unspecified vulnerability in DotNetNuke 4.4.1 through 4.8.4 allows remote authenticated users to bypass authentication and gain privileges via unknown vectors related to a "unique id" for user actions and improper validation of a "user identity."
References
- 48343 vdb-entry
- http://www.dotnetnuke.com/News/SecurityPolicy/Securitybulletinno21/tabid/1174/Default.aspx
- dotnetnuke-identity-auth-bypass(45081) vdb-entry
- 31893 third-party-advisory
- 31145 vdb-entry