CVEvulnerability
CVE-2007-4152
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-08-03
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Description
The Visionsoft Audit on Demand Service (VSAOD) in Visionsoft Audit 12.4.0.0 allows remote attackers to conduct replay attacks by capturing and resending data from the DETAILS and PROCESS sections of a session that schedules an audit.
Affected configurations
• visionsoft audit 12.4.0.0
References
- http://osvdb.org/46980 osvdb.org
- http://www.portcullis.co.uk/uplds/advisories/vareplay%2006_044.txt Vendor Advisory
- http://www.securityfocus.com/bid/25153 www.securityfocus.com
- http://osvdb.org/46980 osvdb.org
- http://www.portcullis.co.uk/uplds/advisories/vareplay%2006_044.txt Vendor Advisory
- http://www.securityfocus.com/bid/25153 www.securityfocus.com