Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

Webgate WebEye Information Disclosure Vulnerability

It has been reported that WebEye is prone to an information disclosure vulnerability that may allow an attacker to harvest sensitive information from the server such as usernames and passwords. The problem exists in the '/admin/wg_user-info.ml' script that fails to verify user credentials before returning sensitive information.







 

Privacy Statement
Copyright 2009, SecurityFocus