Beveiligingsadvies

CVE-2007-5987

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2007-11-15 00:00:00

Laatst bijgewerkt 2024-08-07 15:47:00

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

details.php in BtiTracker before 1.4.5, when torrent viewing is disabled for guests, allows remote attackers to bypass protection mechanisms via a direct request, as demonstrated by (1) reading the details of an arbitrary torrent and (2) modifying a torrent owned by a guest.

← Alle CVE's bekijken Bekijk op cve.org ↗