Winroute Cancel Button privileges management

Summaryinfo

A vulnerability has been found in Winroute and classified as critical. This affects an unknown function of the component Cancel Button. This manipulation causes privileges management. This vulnerability is registered as CVE-1999-0471. No exploit is available. The affected component should be upgraded.

Detailsinfo

A vulnerability was found in Winroute (the affected version unknown). It has been declared as critical. Affected by this vulnerability is an unknown part of the component Cancel Button. The manipulation with an unknown input leads to a privileges management vulnerability. The CWE definition for the vulnerability is CWE-269. The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor. As an impact it is known to affect confidentiality. The summary by CVE is:

The remote proxy server in Winroute allows a remote attacker to reconfigure the proxy without authentication through the "cancel" button.

The weakness was published 04/09/1999. This vulnerability is known as CVE-1999-0471. The exploitation appears to be easy. The attack can be launched remotely. The exploitation doesn't need any form of authentication. Neither technical details nor an exploit are publicly available. MITRE ATT&CK project uses the attack technique T1068 for this issue.

Upgrading eliminates this vulnerability.

The vulnerability is also documented in the databases at X-Force (2079) and Vulnerability Center (SBV-613†). If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Name

• Winroute

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion