Security Advisory

CVE-2006-1620

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2006-04-05 10:00:00

Last updated 2024-08-07 17:19:49

Assigner mitre

State PUBLISHED

Description

admin/accounts/AccountActions.asp in Hosting Controller 2002 RC 1 allows remote attackers to modify passwords of other users, probably via an "Update User" ActionType with a modified UserName parameter and the PassCheck parameter set to TRUE. It was later reported that the vulnerability is present in 6.1 Hotfix 3.3 and earlier.

← Browse all CVEs View on cve.org ↗