CVE-2010-4506 | BDVDB-2026-44979 Detail

Description#

Passlogix v-GO Self-Service Password Reset (SSPR) and OEM before 7.0A allows physically proximate attackers to execute arbitrary programs without authentication by triggering use of an invalid SSL certificate and using the Internet Explorer interface to navigate through the filesystem via a "Save As" dialog that is reachable from the "Certificate Export" wizard.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://exchange.xforce.ibmcloud.com/vulnerabilities/65439
http://www.securityfocus.com/bid/46452
https://www.trustwave.com/spiderlabs/advisories/TWSL2010-007.txt
http://securityreason.com/securityalert/8065

Exploit#

No public exploit known

History#

Version 12011-02-07Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.