VULHUB ™

A fault in the invoke.cfm template will allow unauthenticated users to make use of the Remote Access Service. The parameter "bAuthenticated" can be passed to the server via a URL, form field, or WDDX packet, which will allow RAS usage for that user without requiring a username or password.

A fault in the invoke.cfm template will allow unauthenticated users to make use of the Remote Access Service. The parameter "bAuthenticated" can be passed to the server via a URL, form field, or WDDX packet, which will allow RAS usage for that user without requiring a username or password.