Applied Watch Command Center Authentication Bypass Vulnerability

A vulnerability has been identified in the system that may allow an attacker to bypass authentication to add attacker supplied IDS alerts and new user accounts in the console. Successful exploitation of these issues may allow an attacker to gain unauthorized access to a vulnerable system or conceal intrusion attempts.

Proof of concept exploits have been made available for this issue.


 

Privacy Statement
Copyright 2010, SecurityFocus