Security Advisory

CVE-2012-1256

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2012-02-22 11:00:00
Last updated 2024-08-06 18:53:36
Assigner mitre
State PUBLISHED

Description

The single sign-on (SSO) implementation in EasyVista before 2010.1.1.89 allows remote attackers to bypass authentication via a modified url_account parameter, in conjunction with a valid login name in the SSPI_HEADER parameter, to index.php.