CVE-2011-3645 | BDVDB-2026-47484 Detail

Description#

Newgen OmniDocs allows remote attackers to bypass intended access restrictions via (1) a modified FolderRights parameter to doccab/doclist.jsp, which leads to arbitrary permission changes; or (2) a modified UserIndex parameter to doccab/userprofile/editprofile.jsp, which selects the settings page of an arbitrary user.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://securityreason.com/securityalert/8394
http://seclists.org/fulldisclosure/2011/Sep/283
http://www.exploit-db.com/exploits/17897

Exploit#

http://www.exploit-db.com/exploits/17897

History#

Version 12011-09-27Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.