Security Advisory

CVE-2011-5078

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2012-02-08 21:00:00

Last updated 2024-09-16 20:58:18

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

The web administration interface in the server in Sybase M-Business Anywhere 6.7 before ESD# 3 and 7.0 before ESD# 7 does not require admin authentication for unspecified scripts, which allows remote authenticated users to list or delete user accounts, modify passwords, or read log files via HTTP requests, aka Bug IDs 678497 and 678499.

← Browse all CVEs View on cve.org ↗