TaskTracker Customize.ASP Administrator Unauthorized Access Vulnerability

TaskTracker is prone to an unauthorized-access vulnerability because the application fails to check user credentials before allowing access to administrative functionality.

Attackers may exploit this issue to create accounts with administrative privileges and compromise the vulnerable application.

TaskTracker 1.4, Pro 1.5, and prior versions are vulnerable to this issue.


 

Privacy Statement
Copyright 2010, SecurityFocus