Security Advisory

CVE-2005-4458

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2005-12-21 11:00:00

Last updated 2024-08-07 23:46:05

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Group.pm in Metadot Portal Server 6.4.4 and earlier does not properly reset the $IS_OWNER, $IS_ADMIN, and $IS_MANAGER global variables when performing checks for special privileges, which allows users to gain administrator privileges by adding themselves to the SITE_MGR group.

← Browse all CVEs View on cve.org ↗