| शीर्षक | ColumbiaSoft Document Locator Authentication Bypass |
|---|
| विवरण | [Description]
The WebTools component of Document Locator allows remote attackers to bypass authentication by redirecting the application SQL login to a remote server to capture the application credentials.
[Additional Information]
The vulnerability was patched in Document Locator v7.2 SP4 and v2021.1.
[VulnerabilityType Other]
Authentication Bypass
[Vendor of Product]
ColumbiaSoft
[Affected Component]
The vulnerability lies in the Server field in the /api/authentication/login endpoint of the WebTools component.
[Attack Vectors]
Remote Web Request
[Discoverer]
Micah Van Deusen and Matt Biedronski
|
|---|
| उपयोगकर्ता | mvdeusen (UID 57334) |
|---|
| सबमिशन | 27/10/2023 02:54 PM (3 साल पहले) |
|---|
| संयम | 27/10/2023 03:53 PM (60 minutes later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 243729 [ColumbiaSoft Document Locator सामने 7.2 SP4/2021.1 WebTools login Server कमजोर प्रमाणीकरण] |
|---|
| अंक | 17 |
|---|