Skip to content
OpenAdvisories
Unscored CVE-2018-18941 EUVD-2018-10647GHSA-hqw8-8x83-456g

In Vignette Content Management version 6, it is possible to gain remote access to administrator privileges by discovering the admin passwor…

Published Jan 31, 2019 · Updated Aug 5, 2024 · Assigned by mitre

Description

In Vignette Content Management version 6, it is possible to gain remote access to administrator privileges by discovering the admin password in the vgn/ccb/user/mgmt/user/edit/0,1628,0,00.html?uid=admin HTML source code, and then creating a privileged user account. NOTE: this product is discontinued.

References