CVEvulnerability
CVE-2005-2187
4.6 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2005-07-11
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Description
McAfee IntruShield Security Management System allows remote authenticated users to access the "Generate Reports" feature and modify alerts by setting the Access option to true, as demonstrated using the (1) fullAccess or (2) fullAccessRight parameter in reports-column-center.jsp, or (3) fullAccess parameter to SystemEvent.jsp.
Affected configurations
• mcafee intrushield security management system
References
- http://marc.info/?l=bugtraq&m=112066594312876&w=2 marc.info
- http://marc.info/?l=bugtraq&m=112076813804503&w=2 marc.info
- http://secunia.com/advisories/15961 secunia.com
- http://securitytracker.com/id?1014422 securitytracker.com
- http://marc.info/?l=bugtraq&m=112066594312876&w=2 marc.info
- http://marc.info/?l=bugtraq&m=112076813804503&w=2 marc.info
- http://secunia.com/advisories/15961 secunia.com
- http://securitytracker.com/id?1014422 securitytracker.com